About the session list (problem with SCTP)

[Amgrim]

i am having some problems with SCTP right now, so i made a session capture on my firewall and found something strange there... look this;

session info: proto=132 proto_state=00 duration=87650 expire=never timeout=never flags=00000000 sockflag=00000000 sockport=0 av_idx=0 use=5 origin-shaper= reply-shaper= per_ip_shaper= ha_id=0 policy_dir=0 tunnel=/ state=log npu acct-ext complex statistic(bytes/packets/allow_err): org=2948992/23039/1 reply=0/0/0 tuples=4 orgin->sink: org pre->post, reply pre->post dev=64->60/60->0 gwy=10.10.10.10/0.0.0.0 hook=pre dir=org act=dnat 10.10.10.114:3868->20.20.20.244:3868(20.20.20.230:3868) hook=post dir=org act=snat 10.10.10.114:3868->20.20.20.230:3868(10.10.10.168:3868) hook=pre dir=reply act=dnat 20.20.20.230:3868->10.10.10.168:3868(10.10.10.114:3868) hook=post dir=reply act=snat 20.20.20.230:3868->20.20.20.114:3868(10.10.10.244:3868) misc=0 policy_id=385 id_policy_id=0 auth_info=0 chk_client_info=0 vd=0 serial=71663c78 tos=ff/ff ips_view=0 app_list=0 app=0 dd_type=0 dd_mode=0 per_ip_bandwidth meter: addr=10.10.10.98, bps=3405 npu_state=00000000 npu info: flag=0x00/0x00, offload=0/0, ips_offload=0/0, epid=0/0, ipid=0/0, vlan=0/0 total session 1

The strange part is the policy ID that this session macth... policy id 385 i dont have this address 10.10.10.114 in source, the correct one is the policy id 486, so why this session macth the policy id 385??? the other thing strange is the per_ip_bandwicth meter: addr=10.10.10.98, what is this???? i can tell this address is in the source of the policy 385, but why is showing here???

i am really lost right now with this... can someone help me with this???