If traffic egresses port1 and return traffic comes in on port2 and ECMP
routes exist (and policy) then the session get's "dirty". When a session
is "dirty" it get's re-evaluated by the CPU (instead of offloaded) and
the session get's refreshed:
https...