trace id f9f54388 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id f9f54388 inet trace_table trace_chain verdict continue 
trace id f9f54388 inet trace_table trace_output verdict continue 
trace id f9f54388 inet trace_table trace_output policy accept 
trace id f9f54388 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id f9f54388 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id f9f54388 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id f9f54388 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id f9f54388 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id f9f54388 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id f9f54388 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id f9f54388 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id f9f54388 inet vrf_zones vrf_zones_ct_out policy accept 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id f9f54388 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id f9f54388 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id f9f54388 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id f9f54388 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id f9f54388 ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip raw VYOS_TCP_MSS verdict continue 
trace id f9f54388 ip raw VYOS_TCP_MSS policy accept 
trace id f9f54388 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id f9f54388 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id f9f54388 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id f9f54388 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id f9f54388 inet trace_table trace_chain verdict continue 
trace id f9f54388 inet trace_table trace_output verdict continue 
trace id f9f54388 inet trace_table trace_output policy accept 
trace id f9f54388 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id f9f54388 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id f9f54388 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id f9f54388 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id f9f54388 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id f9f54388 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id f9f54388 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id f9f54388 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id f9f54388 inet vrf_zones vrf_zones_ct_out policy accept 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id f9f54388 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id f9f54388 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id f9f54388 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id f9f54388 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id f9f54388 ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id cab128ce inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id cab128ce inet trace_table trace_chain verdict continue 
trace id cab128ce inet trace_table trace_output verdict continue 
trace id cab128ce inet trace_table trace_output policy accept 
trace id cab128ce ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id cab128ce ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id cab128ce ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id cab128ce ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id cab128ce ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id cab128ce ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id cab128ce ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id cab128ce inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id cab128ce inet vrf_zones vrf_zones_ct_out verdict continue 
trace id cab128ce inet vrf_zones vrf_zones_ct_out policy accept 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id cab128ce ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id cab128ce ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id cab128ce ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id cab128ce ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id cab128ce ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id cab128ce ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip raw VYOS_TCP_MSS verdict continue 
trace id cab128ce ip raw VYOS_TCP_MSS policy accept 
trace id cab128ce ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id cab128ce ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id cab128ce inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id cab128ce inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id cab128ce inet trace_table trace_chain verdict continue 
trace id cab128ce inet trace_table trace_output verdict continue 
trace id cab128ce inet trace_table trace_output policy accept 
trace id cab128ce ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id cab128ce ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id cab128ce ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id cab128ce ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id cab128ce ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id cab128ce ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id cab128ce ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id cab128ce inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id cab128ce inet vrf_zones vrf_zones_ct_out verdict continue 
trace id cab128ce inet vrf_zones vrf_zones_ct_out policy accept 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id cab128ce ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id cab128ce ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id cab128ce ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id cab128ce ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cab128ce ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id cab128ce ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id 6bd8187f inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 6bd8187f inet trace_table trace_chain verdict continue 
trace id 6bd8187f inet trace_table trace_output verdict continue 
trace id 6bd8187f inet trace_table trace_output policy accept 
trace id 6bd8187f ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 6bd8187f ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 6bd8187f ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 6bd8187f ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 6bd8187f ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 6bd8187f ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out policy accept 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 6bd8187f ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 6bd8187f ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 6bd8187f ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id 6bd8187f ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id 6bd8187f ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip raw VYOS_TCP_MSS verdict continue 
trace id 6bd8187f ip raw VYOS_TCP_MSS policy accept 
trace id 6bd8187f ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id 6bd8187f ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id 6bd8187f inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id 6bd8187f inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 6bd8187f inet trace_table trace_chain verdict continue 
trace id 6bd8187f inet trace_table trace_output verdict continue 
trace id 6bd8187f inet trace_table trace_output policy accept 
trace id 6bd8187f ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 6bd8187f ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 6bd8187f ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 6bd8187f ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 6bd8187f ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 6bd8187f ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 6bd8187f inet vrf_zones vrf_zones_ct_out policy accept 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 6bd8187f ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 6bd8187f ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 6bd8187f ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 6bd8187f ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 6bd8187f ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id cf7e0a4e inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id cf7e0a4e inet trace_table trace_chain verdict continue 
trace id cf7e0a4e inet trace_table trace_output verdict continue 
trace id cf7e0a4e inet trace_table trace_output policy accept 
trace id cf7e0a4e ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id cf7e0a4e ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id cf7e0a4e ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id cf7e0a4e ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id cf7e0a4e ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id cf7e0a4e ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out verdict continue 
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out policy accept 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id cf7e0a4e ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id cf7e0a4e ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id cf7e0a4e ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id cf7e0a4e ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id cf7e0a4e ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip raw VYOS_TCP_MSS verdict continue 
trace id cf7e0a4e ip raw VYOS_TCP_MSS policy accept 
trace id cf7e0a4e ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id cf7e0a4e ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id cf7e0a4e inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id cf7e0a4e inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id cf7e0a4e inet trace_table trace_chain verdict continue 
trace id cf7e0a4e inet trace_table trace_output verdict continue 
trace id cf7e0a4e inet trace_table trace_output policy accept 
trace id cf7e0a4e ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id cf7e0a4e ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id cf7e0a4e ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id cf7e0a4e ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id cf7e0a4e ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id cf7e0a4e ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out verdict continue 
trace id cf7e0a4e inet vrf_zones vrf_zones_ct_out policy accept 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id cf7e0a4e ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id cf7e0a4e ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id cf7e0a4e ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id cf7e0a4e ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id cf7e0a4e ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id 33b5b6d8 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 33b5b6d8 inet trace_table trace_chain verdict continue 
trace id 33b5b6d8 inet trace_table trace_output verdict continue 
trace id 33b5b6d8 inet trace_table trace_output policy accept 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 33b5b6d8 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 33b5b6d8 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 33b5b6d8 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out policy accept 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 33b5b6d8 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 33b5b6d8 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 33b5b6d8 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id 33b5b6d8 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id 33b5b6d8 ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip raw VYOS_TCP_MSS verdict continue 
trace id 33b5b6d8 ip raw VYOS_TCP_MSS policy accept 
trace id 33b5b6d8 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id 33b5b6d8 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id 33b5b6d8 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id 33b5b6d8 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 33b5b6d8 inet trace_table trace_chain verdict continue 
trace id 33b5b6d8 inet trace_table trace_output verdict continue 
trace id 33b5b6d8 inet trace_table trace_output policy accept 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 33b5b6d8 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 33b5b6d8 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 33b5b6d8 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 33b5b6d8 inet vrf_zones vrf_zones_ct_out policy accept 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 33b5b6d8 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 33b5b6d8 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 33b5b6d8 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 33b5b6d8 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 33b5b6d8 ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id aa6abbc1 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id aa6abbc1 inet trace_table trace_chain verdict continue 
trace id aa6abbc1 inet trace_table trace_output verdict continue 
trace id aa6abbc1 inet trace_table trace_output policy accept 
trace id aa6abbc1 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id aa6abbc1 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id aa6abbc1 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id aa6abbc1 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id aa6abbc1 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id aa6abbc1 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out policy accept 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id aa6abbc1 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id aa6abbc1 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id aa6abbc1 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id aa6abbc1 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id aa6abbc1 ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip raw VYOS_TCP_MSS verdict continue 
trace id aa6abbc1 ip raw VYOS_TCP_MSS policy accept 
trace id aa6abbc1 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id aa6abbc1 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id aa6abbc1 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id aa6abbc1 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id aa6abbc1 inet trace_table trace_chain verdict continue 
trace id aa6abbc1 inet trace_table trace_output verdict continue 
trace id aa6abbc1 inet trace_table trace_output policy accept 
trace id aa6abbc1 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id aa6abbc1 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id aa6abbc1 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id aa6abbc1 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id aa6abbc1 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id aa6abbc1 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id aa6abbc1 inet vrf_zones vrf_zones_ct_out policy accept 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id aa6abbc1 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id aa6abbc1 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id aa6abbc1 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id aa6abbc1 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id aa6abbc1 ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id e33512c4 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id e33512c4 inet trace_table trace_chain verdict continue 
trace id e33512c4 inet trace_table trace_output verdict continue 
trace id e33512c4 inet trace_table trace_output policy accept 
trace id e33512c4 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id e33512c4 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id e33512c4 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id e33512c4 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id e33512c4 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id e33512c4 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id e33512c4 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id e33512c4 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id e33512c4 inet vrf_zones vrf_zones_ct_out policy accept 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id e33512c4 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id e33512c4 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id e33512c4 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id e33512c4 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id e33512c4 ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip raw VYOS_TCP_MSS verdict continue 
trace id e33512c4 ip raw VYOS_TCP_MSS policy accept 
trace id e33512c4 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id e33512c4 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id e33512c4 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id e33512c4 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id e33512c4 inet trace_table trace_chain verdict continue 
trace id e33512c4 inet trace_table trace_output verdict continue 
trace id e33512c4 inet trace_table trace_output policy accept 
trace id e33512c4 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id e33512c4 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id e33512c4 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id e33512c4 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id e33512c4 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id e33512c4 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id e33512c4 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id e33512c4 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id e33512c4 inet vrf_zones vrf_zones_ct_out policy accept 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id e33512c4 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id e33512c4 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id e33512c4 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id e33512c4 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id e33512c4 ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id 9a7c9fc3 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 9a7c9fc3 inet trace_table trace_chain verdict continue 
trace id 9a7c9fc3 inet trace_table trace_output verdict continue 
trace id 9a7c9fc3 inet trace_table trace_output policy accept 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 9a7c9fc3 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 9a7c9fc3 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 9a7c9fc3 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out policy accept 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 9a7c9fc3 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 9a7c9fc3 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 9a7c9fc3 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id 9a7c9fc3 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id 9a7c9fc3 ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip raw VYOS_TCP_MSS verdict continue 
trace id 9a7c9fc3 ip raw VYOS_TCP_MSS policy accept 
trace id 9a7c9fc3 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id 9a7c9fc3 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id 9a7c9fc3 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id 9a7c9fc3 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 9a7c9fc3 inet trace_table trace_chain verdict continue 
trace id 9a7c9fc3 inet trace_table trace_output verdict continue 
trace id 9a7c9fc3 inet trace_table trace_output policy accept 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 9a7c9fc3 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 9a7c9fc3 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 9a7c9fc3 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 9a7c9fc3 inet vrf_zones vrf_zones_ct_out policy accept 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 9a7c9fc3 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 9a7c9fc3 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 9a7c9fc3 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 9a7c9fc3 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 9a7c9fc3 ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)
trace id 5b9e69d5 inet trace_table trace_chain packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 5b9e69d5 inet trace_table trace_chain verdict continue 
trace id 5b9e69d5 inet trace_table trace_output verdict continue 
trace id 5b9e69d5 inet trace_table trace_output policy accept 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 5b9e69d5 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 5b9e69d5 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 5b9e69d5 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_raw packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out policy accept 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 5b9e69d5 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_filter packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 5b9e69d5 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 5b9e69d5 ip vyos_filter VZONE_Firewall_OUT rule oifname "MGMT" counter packets 0 bytes 0 jump NAME_ALLOW_ALL_4 (verdict jump NAME_ALLOW_ALL_4)
trace id 5b9e69d5 ip vyos_filter NAME_ALLOW_ALL_4 rule counter packets 1679 bytes 360530 accept comment "ipv4-NAM-ALLOW_ALL_4-10" (verdict accept)
trace id 5b9e69d5 ip raw VYOS_TCP_MSS packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip raw VYOS_TCP_MSS verdict continue 
trace id 5b9e69d5 ip raw VYOS_TCP_MSS policy accept 
trace id 5b9e69d5 ip vyos_mangle VYOS_PBR_POSTROUTING packet: oif "MGMT" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_mangle VYOS_PBR_POSTROUTING verdict continue 
trace id 5b9e69d5 ip vyos_mangle VYOS_PBR_POSTROUTING policy accept 
trace id 5b9e69d5 inet trace_table trace_output packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 inet trace_table trace_output rule jump trace_chain (verdict jump trace_chain)
trace id 5b9e69d5 inet trace_table trace_chain rule ip daddr 100.68.1.10 meta nftrace set 1 (verdict continue)
trace id 5b9e69d5 inet trace_table trace_chain verdict continue 
trace id 5b9e69d5 inet trace_table trace_output verdict continue 
trace id 5b9e69d5 inet trace_table trace_output policy accept 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_IGNORE (verdict jump VYOS_CT_IGNORE)
trace id 5b9e69d5 ip vyos_conntrack VYOS_CT_IGNORE verdict return 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump VYOS_CT_TIMEOUT (verdict jump VYOS_CT_TIMEOUT)
trace id 5b9e69d5 ip vyos_conntrack VYOS_CT_TIMEOUT verdict return 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT rule counter packets 1679 bytes 360530 jump FW_CONNTRACK (verdict jump FW_CONNTRACK)
trace id 5b9e69d5 ip vyos_conntrack FW_CONNTRACK rule accept (verdict accept)
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_raw packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_raw rule counter packets 1679 bytes 360530 accept comment "OUT-raw default-action accept" (verdict accept)
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip protocol tcp ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out rule counter packets 1728 bytes 365290 ct original zone set oifname map @ct_iface_map (verdict continue)
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out verdict continue 
trace id 5b9e69d5 inet vrf_zones vrf_zones_ct_out policy accept 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER rule counter packets 1679 bytes 360530 jump VYOS_CT_HELPER (verdict jump VYOS_CT_HELPER)
trace id 5b9e69d5 ip vyos_conntrack VYOS_CT_HELPER verdict return 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER verdict continue 
trace id 5b9e69d5 ip vyos_conntrack OUTPUT_HELPER policy accept 
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_filter packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_filter VYOS_OUTPUT_filter rule counter packets 1679 bytes 360530 accept comment "OUT-filter default-action accept" (verdict accept)
trace id 5b9e69d5 ip vyos_filter VYOS_ZONE_OUTPUT packet: oif "eth12" ip saddr 100.68.1.9 ip daddr 100.68.1.10 ip dscp cs0 ip ecn not-ect ip ttl 64 ip id 0 ip length 60 tcp sport 22 tcp dport 35188 tcp flags == 0x12 tcp window 65160 
trace id 5b9e69d5 ip vyos_filter VYOS_ZONE_OUTPUT rule counter packets 1679 bytes 360530 jump VZONE_Firewall_OUT (verdict jump VZONE_Firewall_OUT)
trace id 5b9e69d5 ip vyos_filter VZONE_Firewall_OUT rule counter packets 0 bytes 0 drop comment "zone_Firewall default-action drop" (verdict drop)