=~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2013.06.14 15:09:38 =~=~=~=~=~=~=~=~=~=~=~= webfilter (root) # diag debug enable webfilter (root) # diag debug console timestamp enable webfilter (root) # diag debug flow show console enable show trace messages on console webfilter (root) # diag debug flow show function-name enable show function name webfilter (root) # diag debug flow filter addr 10.9.193.232 webfilter (root) # diag debug flow filter port 443 webfilter (root) # diagnose debug diag debug flow trace start 500 webfilter (root) # 2013-06-14 15:11:11 id=13 trace_id=1101 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:11 id=13 trace_id=1101 func=init_ip_session_common line=4428 msg="allocate a new session-00013674" 2013-06-14 15:11:11 id=13 trace_id=1101 func=vf_ip4_route_input line=1603 msg="find a route: gw-10.10.10.1 via wan1" 2013-06-14 15:11:11 id=13 trace_id=1101 func=get_new_addr line=2395 msg="find SNAT: IP-10.10.10.101, port-58923" 2013-06-14 15:11:11 id=13 trace_id=1101 func=fw_forward_handler line=647 msg="Allowed by Policy-2: AV SNAT" 2013-06-14 15:11:11 id=13 trace_id=1101 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:11 id=13 trace_id=1102 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:11 id=13 trace_id=1102 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:11 id=13 trace_id=1103 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:11 id=13 trace_id=1103 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:11 id=13 trace_id=1103 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:11 id=13 trace_id=1104 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:11 id=13 trace_id=1104 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:11 id=13 trace_id=1104 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:11 id=13 trace_id=1105 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:11 id=13 trace_id=1105 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:11 id=13 trace_id=1106 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:11 id=13 trace_id=1106 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:11 id=13 trace_id=1106 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:11 id=13 trace_id=1107 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:11 id=13 trace_id=1107 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:11 id=13 trace_id=1107 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:11 id=13 trace_id=1108 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:11 id=13 trace_id=1108 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:11 id=13 trace_id=1108 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:12 id=13 trace_id=1109 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:12 id=13 trace_id=1109 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1109 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:12 id=13 trace_id=1110 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:12 id=13 trace_id=1110 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1110 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:12 id=13 trace_id=1111 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:12 id=13 trace_id=1111 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1111 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:12 id=13 trace_id=1112 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:12 id=13 trace_id=1112 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:12 id=13 trace_id=1113 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:12 id=13 trace_id=1113 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:12 id=13 trace_id=1114 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:12 id=13 trace_id=1114 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1114 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:12 id=13 trace_id=1115 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:12 id=13 trace_id=1115 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1115 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:12 id=13 trace_id=1116 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:12 id=13 trace_id=1116 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1116 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:12 id=13 trace_id=1117 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:12 id=13 trace_id=1117 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:12 id=13 trace_id=1118 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:12 id=13 trace_id=1118 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:12 id=13 trace_id=1119 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:12 id=13 trace_id=1119 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1119 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:12 id=13 trace_id=1120 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:12 id=13 trace_id=1120 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:12 id=13 trace_id=1121 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:12 id=13 trace_id=1121 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1121 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:12 id=13 trace_id=1122 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from internal1." 2013-06-14 15:11:12 id=13 trace_id=1122 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1122 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:12 id=13 trace_id=1123 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:12 id=13 trace_id=1123 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:12 id=13 trace_id=1124 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:12 id=13 trace_id=1124 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:12 id=13 trace_id=1124 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:13 id=13 trace_id=1125 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:13 id=13 trace_id=1125 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:13 id=13 trace_id=1125 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:13 id=13 trace_id=1126 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:13 id=13 trace_id=1126 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:13 id=13 trace_id=1126 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" 2013-06-14 15:11:13 id=13 trace_id=1127 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58923) from local." 2013-06-14 15:11:13 id=13 trace_id=1127 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, reply direction" 2013-06-14 15:11:13 id=13 trace_id=1128 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58923->74.125.229.180:443) from local." 2013-06-14 15:11:13 id=13 trace_id=1128 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013674, original direction" 2013-06-14 15:11:13 id=13 trace_id=1128 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58923" webfilter (root) # webfilter (root) # webfilter (root) # webfilter (root) # 2013-06-14 15:11:26 id=13 trace_id=1129 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:26 id=13 trace_id=1129 func=init_ip_session_common line=4428 msg="allocate a new session-000136d8" 2013-06-14 15:11:26 id=13 trace_id=1129 func=vf_ip4_route_input line=1603 msg="find a route: gw-10.10.10.1 via wan1" 2013-06-14 15:11:26 id=13 trace_id=1129 func=get_new_addr line=2395 msg="find SNAT: IP-10.10.10.101, port-58931" 2013-06-14 15:11:26 id=13 trace_id=1129 func=fw_forward_handler line=647 msg="Allowed by Policy-2: AV SNAT" 2013-06-14 15:11:26 id=13 trace_id=1129 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:26 id=13 trace_id=1130 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:26 id=13 trace_id=1130 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:26 id=13 trace_id=1131 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:26 id=13 trace_id=1131 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:26 id=13 trace_id=1131 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:26 id=13 trace_id=1132 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:26 id=13 trace_id=1132 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:26 id=13 trace_id=1132 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:26 id=13 trace_id=1133 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:26 id=13 trace_id=1133 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:26 id=13 trace_id=1134 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:26 id=13 trace_id=1134 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:26 id=13 trace_id=1134 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1135 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1135 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1135 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1136 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1136 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1136 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1137 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1137 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1137 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1138 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1138 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1138 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1139 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1139 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1140 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1140 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1141 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:27 id=13 trace_id=1141 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1141 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:27 id=13 trace_id=1142 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1142 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1142 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1143 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:27 id=13 trace_id=1143 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1143 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:27 id=13 trace_id=1144 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1144 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1145 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1145 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1146 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:27 id=13 trace_id=1146 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1146 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:27 id=13 trace_id=1147 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1147 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1148 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:27 id=13 trace_id=1148 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1148 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:27 id=13 trace_id=1149 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from internal1." 2013-06-14 15:11:27 id=13 trace_id=1149 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1149 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:27 id=13 trace_id=1150 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1150 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1151 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1151 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1151 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1152 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1152 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1152 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" 2013-06-14 15:11:27 id=13 trace_id=1153 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.180:443->10.9.193.232:58931) from local." 2013-06-14 15:11:27 id=13 trace_id=1153 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, reply direction" 2013-06-14 15:11:27 id=13 trace_id=1154 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:58931->74.125.229.180:443) from local." 2013-06-14 15:11:27 id=13 trace_id=1154 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000136d8, original direction" 2013-06-14 15:11:27 id=13 trace_id=1154 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:58931" webfilter (root) # webfilter (root) # diag debug disable webfilter (root) # diag debug flow filter clear webfilter (root) # diag debug reset webfilter (root) # diag debug enable webfilter (root) # diag debug console timestamp enable webfilter (root) # diag debug app ssl -1 webfilter (root) # 2013-06-14 15:11:55 id=13 trace_id=1155 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from internal1." 2013-06-14 15:11:55 id=13 trace_id=1155 func=init_ip_session_common line=4428 msg="allocate a new session-00013781" 2013-06-14 15:11:55 id=13 trace_id=1155 func=vf_ip4_route_input line=1603 msg="find a route: gw-10.10.10.1 via wan1" 2013-06-14 15:11:55 id=13 trace_id=1155 func=get_new_addr line=2395 msg="find SNAT: IP-10.10.10.101, port-45210" 2013-06-14 15:11:55 id=13 trace_id=1155 func=fw_forward_handler line=647 msg="Allowed by Policy-2: AV SNAT" 2013-06-14 15:11:55 id=13 trace_id=1155 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:55 id=13 trace_id=1156 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45210) from local." 2013-06-14 15:11:55 id=13 trace_id=1156 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, reply direction" 2013-06-14 15:11:55 id=13 trace_id=1157 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from internal1." 2013-06-14 15:11:55 id=13 trace_id=1157 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:55 id=13 trace_id=1157 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:55 id=13 trace_id=1158 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from internal1." 2013-06-14 15:11:55 id=13 trace_id=1158 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:55 id=13 trace_id=1158 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:11:55 id=13 trace_id=1159 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45210) from local." 2013-06-14 15:11:55 id=13 trace_id=1159 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, reply direction" 2013-06-14 15:11:55 [0]-ssl_acceptor.c:mainLoop:1243 nready=1 errno=0 2013-06-14 15:11:55 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:11:55 [65]-proxyIpcRecv [10], type [7], cli [12], srv [-1] 2013-06-14 15:11:55 [65]-[*]: Current connections [0/29488] 2013-06-14 15:11:55 alloc a conn is 0x1ff4b38 2013-06-14 15:11:55 new conn id 69 2013-06-14 15:11:55 [65]-[69] ssl from listen: client:10.9.193.232:45210, server:74.125.229.178:443 2013-06-14 15:11:55 [65]-69:caname WEBFLTR, ca_id 1 2013-06-14 15:11:55 69:caname WEBFLTR, ca_id 1 2013-06-14 15:11:55 new conn,cli fd is 12, srv fd is 13 2013-06-14 15:11:55 69:proxy_ssl_ips_app_init 2013-06-14 15:11:55 ipsapp svc 0 create session 69 2013-06-14 15:11:55 ipsapp ses 69 open 2013-06-14 15:11:55 ipsapp ses 69 send start msg 144 len 0 dir 0 2013-06-14 15:11:55 69:proxy_ssl_ips_app_init 2013-06-14 15:11:55 [65]-<000.000000> [69]: 10.9.193.232:45210 --> 74.125.229.178:443: [SSL SETUP ] Event - INPROGRESS_EVENT 2013-06-14 15:11:55 [65]-<000.000000> [69]: 10.9.193.232:45210 --> 74.125.229.178:443: [SSL SETUP ] INPROGRESS_STATE 2013-06-14 15:11:55 69:checkConnectionEvent 2013-06-14 15:11:55 check fd 12 2013-06-14 15:11:55 clear client read 2013-06-14 15:11:55 clear client write, INPROGRESS_STATE 2013-06-14 15:11:55 check fd 13 2013-06-14 15:11:55 clear server read 2013-06-14 15:11:55 set server write 2013-06-14 15:11:55 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:11:55 ipsapp us 11 write (1,204) 2013-06-14 15:11:55 id=13 trace_id=1160 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:11:55 id=13 trace_id=1160 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:55 id=13 trace_id=1160 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:11:55 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:11:55 ipsapp us 11 read (0,2048) 2013-06-14 15:11:55 ipsapp ses 69 msg 144 eval response dir 0 act 0 app 0 proto 0 2013-06-14 15:11:56 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:11:56 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:11:56 inProgressServerWrite 2013-06-14 15:11:56 [65]-<000.000000> [69]: 10.9.193.232:45210 --> 74.125.229.178:443: [SSL SVRWRTRDY ] Event - SSL_SETUP_EVENT 2013-06-14 15:11:56 [65]-<000.000000> [69]: 10.9.193.232:45210 --> 74.125.229.178:443: [SSL SVRWRTRDY ] SSL_SETUP_STATE 2013-06-14 15:11:56 69:proxy_ssl_port_init 2013-06-14 15:11:56 proxy_ssl_port_ssl_fts_port_out, sp-0x1ff4fac, sink-0x3207e3b8 2013-06-14 15:11:56 69:proxy_ssl_port_init 2013-06-14 15:11:56 proxy_ssl_port_ssl_fts_port_out, sp-0x1ff507c, sink-0x3207e578 2013-06-14 15:11:56 69:checkConnectionEvent 2013-06-14 15:11:56 check fd 12 2013-06-14 15:11:56 set client read 2013-06-14 15:11:56 clear client write, SSL_SETUP_STATE 2013-06-14 15:11:56 check fd 13 2013-06-14 15:11:56 set server read 2013-06-14 15:11:56 clear server write 2013-06-14 15:11:56 69:sslStateCheck 2013-06-14 15:11:56 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:11:56 sslClientFdFunction, fd is 12 2013-06-14 15:11:56 69:sslStateCheck 2013-06-14 15:11:56 readClientProxy 2013-06-14 15:11:56 69:read client ssl 203 bytes 2013-06-14 15:11:56 [65]-69:set hostname from client hello SNI "www.google.com" 2013-06-14 15:11:56 69:set hostname from client hello SNI "www.google.com" 2013-06-14 15:11:56 [65]-69:server name found in cache 2013-06-14 15:11:56 69:server name found in cache 2013-06-14 15:11:56 69:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:11:56 69:checkConnectionEvent 2013-06-14 15:11:56 check fd 12 2013-06-14 15:11:56 2013-06-14 15:11:56 id=13 trace_id=1161 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:11:56 id=13 trace_id=1161 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:56 id=13 trace_id=1161 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" set client read 2013-06-14 15:11:56 clear client write, SSL_SETUP_STATE 2013-06-14 15:11:56 check fd 13 2013-06-14 15:11:56 set server read 2013-06-14 15:11:56 set server write 2013-06-14 15:11:56 69:checkConnectionEvent 2013-06-14 15:11:56 check fd 12 2013-06-14 15:11:56 set client read 2013-06-14 15:11:56 clear client write, SSL_SETUP_STATE 2013-06-14 15:11:56 check fd 13 2013-06-14 15:11:56 set server read 2013-06-14 15:11:56 set server write 2013-06-14 15:11:56 69:sslStateCheck 2013-06-14 15:11:56 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:11:56 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:11:56 69:sslStateCheck 2013-06-14 15:11:56 writeServerProxy 2013-06-14 15:11:56 69:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:11:56 69:fd is 13,write to server ssl 212 bytes 2013-06-14 15:11:56 69:checkConnectionEvent 2013-06-14 15:11:56 check fd 12 2013-06-14 15:11:56 set client read 2013-06-14 15:11:56 clear client write, SSL_SETUP_STATE 2013-06-14 15:11:56 check fd 13 2013-06-14 15:11:56 set server read 2013-06-14 15:11:56 clear server write 2013-06-14 15:11:56 69:sslStateCheck 2013-06-14 15:11:56 id=13 trace_id=1162 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:11:56 id=13 trace_id=1162 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:56 id=13 trace_id=1162 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:11:57 id=13 trace_id=1163 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:11:57 id=13 trace_id=1163 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:57 id=13 trace_id=1163 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:11:59 id=13 trace_id=1164 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:11:59 id=13 trace_id=1164 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:11:59 id=13 trace_id=1164 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:12:00 [0]-ssl_acceptor.c:mainLoop:1248 nready=0 errno=0 2013-06-14 15:12:03 id=13 trace_id=1165 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:12:03 id=13 trace_id=1165 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:12:03 id=13 trace_id=1165 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:12:05 [0]-ssl_acceptor.c:mainLoop:1248 nready=0 errno=0 2013-06-14 15:12:05 [65]-ssl_loop.c:mainLoop:3449 nready=0 errno=0 2013-06-14 15:12:06 id=13 trace_id=1166 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:12:06 id=13 trace_id=1166 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:12:06 id=13 trace_id=1166 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:06 sslServerFdFunction, fd is 13, 00000001 2013-06-14 15:12:06 69:sslStateCheck 2013-06-14 15:12:06 readServerProxy 2013-06-14 15:12:06 read r==0 2013-06-14 15:12:06 69:ssl srv port close recv 2013-06-14 15:12:06 69:shouldReset, type 1 2013-06-14 15:12:06 [65]-<000.000000> [69]: 10.9.193.232:45210 --> 74.125.229.178:443: [SSL SVRRDRDY ] Event - RESET_EVENT 2013-06-14 15:12:06 [65]-<000.000000> [69]: 10.9.193.232:45210 --> 74.125.229.178:443: [SSL SVRRDRDY ] RESET_STATE 2013-06-14 15:12:06 [65]-[69] ips closed 2013-06-14 15:12:06 ipsapp ses 69 close 2013-06-14 15:12:06 ipsapp ses 69 send end msg 145 len 0 dir 0 2013-06-14 15:12:06 69:checkConnectionEvent 2013-06-14 15:12:06 69:resetConn 2013-06-14 15:12:06 69:proxy_ssl_port_exit 2013-06-14 15:12:06 69:proxy_ssl_port_close 2013-06-14 15:12:06 proxy_ssl_port_ssl_fts_port_close2013-06-14 15:12:06 ,cli port 2013-06-14 15:12:06 0,0 2013-06-14 15:12:06 69:read from client: ssl - 203 bytes, proxy - 0 bytes 2013-06-14 15:12:06 69:write to client: ssl - 0 bytes, proxy - 0 bytes 2013-06-14 15:12:06 69:0,0 2013-06-14 15:12:06 proxy_ssl_port_output_buffer_close2013-06-14 15:12:06 ,cli port 2013-06-14 15:12:06 69:proxy_ssl_port_exit 2013-06-14 15:12:06 69:proxy_ssl_port_close 2013-06-14 15:12:06 proxy_ssl_port_ssl_fts_port_close2013-06-14 15:12:06 ,srv port 2013-06-14 15:12:06 212,212 2013-06-14 15:12:06 69:read from server: ssl - 0 bytes, proxy - 0 bytes 2013-06-14 15:12:06 69:write to server: ssl - 212 bytes, proxy - 0 bytes 2013-06-14 15:12:06 69:0,212 2013-06-14 15:12:06 proxy_ssl_port_output_buffer_close2013-06-14 15:12:06 ,srv port 2013-06-14 15:12:06 close client fd:12 2013-06-14 15:12:06 close server fd:13 2013-06-14 15:12:06 freeConn 69 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:06 ipsapp us 11 write (1,204) 2013-06-14 15:12:06 [0]-ssl_acceptor.c:mainLoop:1243 nready=1 errno=0 2013-06-14 15:12:06 id=13 trace_id=1167 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45210) from local." 2013-06-14 15:12:06 id=13 trace_id=1167 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, reply direction" 2013-06-14 15:12:06 id=13 trace_id=1168 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:12:06 id=13 trace_id=1168 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:12:06 id=13 trace_id=1168 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45210" 2013-06-14 15:12:06 id=13 trace_id=1169 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from internal1." 2013-06-14 15:12:06 id=13 trace_id=1169 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, original direction" 2013-06-14 15:12:06 id=13 trace_id=1169 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:06 id=13 trace_id=1170 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45210) from local." 2013-06-14 15:12:06 id=13 trace_id=1170 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-00013781, reply direction" 2013-06-14 15:12:06 id=13 trace_id=1171 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:06 id=13 trace_id=1171 func=init_ip_session_common line=4428 msg="allocate a new session-000137ca" 2013-06-14 15:12:06 id=13 trace_id=1171 func=vf_ip4_route_input line=1603 msg="find a route: gw-10.10.10.1 via wan1" 2013-06-14 15:12:06 id=13 trace_id=1171 func=get_new_addr line=2395 msg="find SNAT: IP-10.10.10.101, port-45211" 2013-06-14 15:12:06 id=13 trace_id=1171 func=fw_forward_handler line=647 msg="Allowed by Policy-2: AV SNAT" 2013-06-14 15:12:06 id=13 trace_id=1171 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:06 id=13 trace_id=1172 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:06 id=13 trace_id=1172 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:06 id=13 trace_id=1173 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:06 id=13 trace_id=1173 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:06 id=13 trace_id=1173 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:06 id=13 trace_id=1174 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:06 id=13 trace_id=1174 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:06 id=13 trace_id=1174 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:06 id=13 trace_id=1175 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:06 id=13 trace_id=1175 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=2 errno=0 2013-06-14 15:12:06 [65]-proxyIpcRecv [10], type [7], cli [12], srv [-1] 2013-06-14 15:12:06 [65]-[*]: Current connections [0/29488] 2013-06-14 15:12:06 alloc a conn is 0x1ff4b38 2013-06-14 15:12:06 new conn id 70 2013-06-14 15:12:06 [65]-[70] ssl from listen: client:10.9.193.232:45211, server:74.125.229.178:443 2013-06-14 15:12:06 [65]-70:caname WEBFLTR, ca_id 1 2013-06-14 15:12:06 70:caname WEBFLTR, ca_id 1 2013-06-14 15:12:06 new conn,cli fd is 12, srv fd is 13 2013-06-14 15:12:06 70:proxy_ssl_ips_app_init 2013-06-14 15:12:06 ipsapp svc 0 create session 70 2013-06-14 15:12:06 ipsapp ses 70 open 2013-06-14 15:12:06 ipsapp ses 70 send start msg 146 len 0 dir 0 2013-06-14 15:12:06 70:proxy_ssl_ips_app_init 2013-06-14 15:12:06 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL SETUP ] Event - INPROGRESS_EVENT 2013-06-14 15:12:06 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL SETUP ] INPROGRESS_STATE 2013-06-14 15:12:06 70:checkConnectionEvent 2013-06-14 15:12:06 check fd 12 2013-06-14 15:12:06 clear client read 2013-06-14 15:12:06 clear client write, INPROGRESS_STATE 2013-06-14 15:12:06 check fd 13 2013-06-14 15:12:06 clear server read 2013-06-14 15:12:06 set server write 2013-06-14 15:12:06 ipsapp us 11 read (0,2048) 2013-06-14 15:12:06 ipsapp ses 69 msg 145 recv session end ack 2013-06-14 15:12:06 ipsapp us 11 write (1,204) 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:06 ipsapp us 11 read (0,2048) 2013-06-14 15:12:06 ipsapp ses 70 msg 146 eval response dir 0 act 0 app 0 proto 0 2013-06-14 15:12:06 id=13 trace_id=1176 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:06 id=13 trace_id=1176 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:06 id=13 trace_id=1176 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:06 id=13 trace_id=1177 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:06 id=13 trace_id=1177 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:06 id=13 trace_id=1177 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:06 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:12:06 inProgressServerWrite 2013-06-14 15:12:06 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL SVRWRTRDY ] Event - SSL_SETUP_EVENT 2013-06-14 15:12:06 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL SVRWRTRDY ] SSL_SETUP_STATE 2013-06-14 15:12:06 70:proxy_ssl_port_init 2013-06-14 15:12:06 proxy_ssl_port_ssl_fts_port_out, sp-0x1ff4fac, sink-0x3207e3b8 2013-06-14 15:12:06 70:proxy_ssl_port_init 2013-06-14 15:12:06 proxy_ssl_port_ssl_fts_port_out, sp-0x1ff507c, sink-0x3207e578 2013-06-14 15:12:06 70:checkConnectionEvent 2013-06-14 15:12:06 check fd 12 2013-06-14 15:12:06 set client read 2013-06-14 15:12:06 clear client write, SSL_SETUP_STATE 2013-06-14 15:12:06 check fd 13 2013-06-14 15:12:06 set server read 2013-06-14 15:12:06 clear server write 2013-06-14 15:12:06 70:sslStateCheck 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:06 sslClientFdFunction, fd is 12 2013-06-14 15:12:06 70:sslStateCheck 2013-06-14 15:12:06 readClientProxy 2013-06-14 15:12:06 70:read client ssl 203 bytes 2013-06-14 15:12:06 [65]-70:set hostname from client hello SNI "www.google.com" 2013-06-14 15:12:06 70:set hostname from client hello SNI "www.google.com" 2013-06-14 15:12:06 [65]-70:server name found in cache 2013-06-14 15:12:06 70:server name found in cache 2013-06-14 15:12:06 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:06 70:checkConnectionEvent 2013-06-14 15:12:06 check fd 12 2013-06-14 15:12:06 set client read 2013-06-14 15:12:06 clear client write, SSL_SETUP_STATE 2013-06-14 15:12:06 check fd 13 2013-06-14 15:12:06 set server read 2013-06-14 15:12:06 set server write 2013-06-14 15:12:06 70:checkConnectionEvent 2013-06-14 15:12:06 check fd 12 2013-06-14 15:12:06 set client read 2013-06-14 15:12:06 clear client write, SSL_SETUP_STATE 2013-06-14 15:12:06 check fd 13 2013-06-14 15:12:06 set server read 2013-06-14 15:12:06 set server write 2013-06-14 15:12:06 70:sslStateCheck 2013-06-14 15:12:06 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:06 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:12:06 70:sslStateCheck 2013-06-14 15:12:06 writeServerProxy 2013-06-14 15:12:06 70:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:12:06 id=13 trace_id=1178 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:06 id=13 trace_id=1178 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:06 id=13 trace_id=1178 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:06 70:fd is 13,write to server ssl 212 bytes 2013-06-14 15:12:06 70:checkConnectionEvent 2013-06-14 15:12:06 check fd 12 2013-06-14 15:12:06 set client read 2013-06-14 15:12:06 clear client write, SSL_SETUP_STATE 2013-06-14 15:12:06 check fd 13 2013-06-14 15:12:06 set server read 2013-06-14 15:12:06 clear server write 2013-06-14 15:12:06 70:sslStateCheck 2013-06-14 15:12:07 id=13 trace_id=1179 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:07 id=13 trace_id=1179 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:07 id=13 trace_id=1179 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 id=13 trace_id=1180 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1180 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1180 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 id=13 trace_id=1181 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1181 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1181 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 id=13 trace_id=1182 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1182 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1182 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 sslServerFdFunction, fd is 13, 00000001 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 readServerProxy 2013-06-14 15:12:09 70:read server ssl 1916 bytes 2013-06-14 15:12:09 [65]-70:on_server hello, CipherSuite c011 2013-06-14 15:12:09 70:on_server hello, CipherSuite c011 2013-06-14 15:12:09 [65]-70:client hello minor is 1, server hello minor is 1 2013-06-14 15:12:09 70:client hello minor is 1, server hello minor is 1 2013-06-14 15:12:09 70:fts_ssl_port_clt_server_hello_full 2013-06-14 15:12:09 70:proxy_ssl_port_caps_on_srv_certs 2013-06-14 15:12:09 [65]-70:server cert subject CN is "www.google.com" 2013-06-14 15:12:09 70:server cert subject CN is "www.google.com" 2013-06-14 15:12:09 [65]-70:server cert issuer CN is "Google Internet Authority" 2013-06-14 15:12:09 70:server cert issuer CN is "Google Internet Authority" 2013-06-14 15:12:09 [65]-70:server cert validity: not before Jun 5 19:06:27 2013 GMT, not after Oct 31 23:59:59 2013 GMT 2013-06-14 15:12:09 70:server cert validity: not before Jun 5 19:06:27 2013 GMT, not after Oct 31 23:59:59 2013 GMT 2013-06-14 15:12:09 [65]-70:found MITM cert in cache, Subject CN: "www.google.com" hostname: "www.google.com", ca_id:1 2013-06-14 15:12:09 70:found MITM cert in cache, Subject CN: "www.google.com" hostname: "www.google.com", ca_id:1 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL LOOPEND ] Event - URLFILTER_WAIT_EVENT 2013-06-14 15:12:09 2013-06-14 15:12:09 id=13 trace_id=1183 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1183 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1183 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL LOOPEND ] URLFILTER_WAIT_STATE 2013-06-14 15:12:09 id=13 trace_id=1184 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1184 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1184 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 70:urlfilterEnter 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 clear client read 2013-06-14 15:12:09 clear client write, URLFILTER_WAIT_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 clear server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:urlFilterLoopEnd 2013-06-14 15:12:09 70:ftgd_url_filter not enabled or error 2013-06-14 15:12:09 70:ALL DONE, SSL_CONTINUE_SETUP_EVENT 2013-06-14 15:12:09 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL LOOPEND ] Event - SSL_CONTINUE_SETUP_EVENT 2013-06-14 15:12:09 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL LOOPEND ] SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 70:sslContinueSetupEnter 2013-06-14 15:12:09 70:ALL DONE 2013-06-14 15:12:09 70:proxy_ssl_port_server_cert_action, action 0, cache 1 2013-06-14 15:12:09 proxy 2 server mskb, status is 0 2013-06-14 15:12:09 70:server hello done 2013-06-14 15:12:09 70:proxy_ssl_port_resume 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 set client write 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 set client write 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 set server write 2013-06-14 15:12:09 70:proxy 2 server change cipher spec sent 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 set client write 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 set server write 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=2 errno=0 2013-06-14 15:12:09 sslClientFdFunction, fd is 12 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 writeClientProxy 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:12:09 id=13 trace_id=1185 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1185 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:09 id=13 trace_id=1186 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1186 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:09 id=13 trace_id=1187 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:09 id=13 trace_id=1187 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1187 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:09 70:fd is 12,write to client ssl 2547 bytes 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 set server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 writeServerProxy 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:12:09 id=13 trace_id=1188 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1188 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1188 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 70:fd is 13,write to server ssl 81 bytes 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 ssl_proxy_kxp_on_event 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:09 id=13 trace_id=1189 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:09 id=13 trace_id=1189 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1189 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:09 id=13 trace_id=1190 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1190 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 set server write 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=2 errno=0 2013-06-14 15:12:09 sslServerFdFunction, fd is 13, 00000004 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 writeServerProxy 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:12:09 70:fd is 13,write to server ssl 41 bytes 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 sslClientFdFunction, fd is 12 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 readClientProxy 2013-06-14 15:12:09 70:read client ssl 134 bytes 2013-06-14 15:12:09 client 2 proxy mskb, status is 0 2013-06-14 15:12:09 70:client 2 proxy change cipher spec recv 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 ssl_proxy_kxp_on_event 2013-06-14 15:12:09 70:client 2 proxy change cipher spec sent 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 set client write 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 sslClientFdFunction, fd is 12 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 writeClientProxy 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:12:09 id=13 trace_id=1191 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1191 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:09 70:fd is 12,write to client ssl 6 bytes 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 ssl_proxy_kxp_on_event 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_write_sink_write 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 set client read 2013-06-14 15:12:09 set client write 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70 c2p cache 2013-06-14 15:12:09 70:client 2 proxy handshake done 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 sslClientFdFunction, fd is 12 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 writeClientProxy 2013-06-14 15:12:09 70:proxy_ssl_port_ssl_flush, action 0, finished 0 2013-06-14 15:12:09 70:fd is 12,write to client ssl 53 bytes 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 2013-06-14 15:12:09 id=13 trace_id=1192 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:09 id=13 trace_id=1192 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1192 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:09 id=13 trace_id=1193 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1193 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:09 id=13 trace_id=1194 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:09 id=13 trace_id=1194 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1194 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:09 id=13 trace_id=1195 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from internal1." 2013-06-14 15:12:09 id=13 trace_id=1195 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1195 func=av_receive line=255 msg="send to application layer" 2013-06-14 15:12:09 id=13 trace_id=1196 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1196 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" clear client read 2013-06-14 15:12:09 clear client write, SSL_CONTINUE_SETUP_STATE 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 clear server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 id=13 trace_id=1197 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1197 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1197 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 id=13 trace_id=1198 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1198 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1198 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 id=13 trace_id=1199 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1199 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1199 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 id=13 trace_id=1200 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1200 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1200 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 sslServerFdFunction, fd is 13, 00000001 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 readServerProxy 2013-06-14 15:12:09 70:read server ssl 7 bytes 2013-06-14 15:12:09 70:proxy 2 server alert recv 2013-06-14 15:12:09 70:proxy_ssl_port_proxy_write_sink_close2013-06-14 15:12:09 ,srv port,2013-06-14 15:12:09 close type is 0 2013-06-14 15:12:09 70:ssl_finished 2013-06-14 15:12:09 70:proxy 2 server close recv 2013-06-14 15:12:09 70:checkConnectionEvent 2013-06-14 15:12:09 check fd 12 2013-06-14 15:12:09 clear client read 2013-06-14 15:12:09 set client write 2013-06-14 15:12:09 check fd 13 2013-06-14 15:12:09 set server read 2013-06-14 15:12:09 set server write 2013-06-14 15:12:09 70:sslStateCheck 2013-06-14 15:12:09 reset event 2013-06-14 15:12:09 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL LOOPEND ] Event - RESET_EVENT 2013-06-14 15:12:09 [65]-<000.000000> [70]: 10.9.193.232:45211 --> 74.125.229.178:443: [SSL LOOPEND ] RESET_STATE 2013-06-14 15:12:09 [65]-[70] ips closed 2013-06-14 15:12:09 ipsapp ses 70 close 2013-06-14 15:12:09 ipsapp ses 70 send end msg 147 len 0 dir 0 2013-06-14 15:12:09 70:resetConn 2013-06-14 15:12:09 70:proxy_ssl_port_exit 2013-06-14 15:12:09 70:proxy_ssl_port_close 2013-06-14 15:12:09 proxy_ssl_port_ssl_fts_port_close2013-06-14 15:12:09 ,cli port 2013-06-14 15:12:09 2606,2606 2013-06-14 15:12:09 70:read from client: ssl - 337 bytes, proxy - 0 bytes 2013-06-14 15:12:09 70:write to client: ssl - 2606 bytes, proxy - 0 bytes 2013-06-14 15:12:09 70:0,2606 2013-06-14 15:12:09 proxy_ssl_port_output_buffer_close2013-06-14 15:12:09 ,cli port 2013-06-14 15:12:09 70:proxy_ssl_port_exit 2013-06-14 15:12:09 70:proxy_ssl_port_close 2013-06-14 15:12:09 proxy_ssl_port_ssl_fts_port_close2013-06-14 15:12:09 ,srv port 2013-06-14 15:12:09 334,334 2013-06-14 15:12:09 70:read from server: ssl - 1923 bytes, proxy - 0 bytes 2013-06-14 15:12:09 70:write to server: ssl - 334 bytes, proxy - 0 bytes 2013-06-14 15:12:09 70:0,334 2013-06-14 15:12:09 proxy_ssl_port_output_buffer_close2013-06-14 15:12:09 ,srv port 2013-06-14 15:12:09 close client fd:12 2013-06-14 15:12:09 id=13 trace_id=1201 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 74.125.229.178:443->10.9.193.232:45211) from local." 2013-06-14 15:12:09 id=13 trace_id=1201 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, reply direction" 2013-06-14 15:12:09 close server fd:13 2013-06-14 15:12:09 id=13 trace_id=1202 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45211->74.125.229.178:443) from local." 2013-06-14 15:12:09 id=13 trace_id=1202 func=resolve_ip_tuple_fast line=4333 msg="Find an existing session, id-000137ca, original direction" 2013-06-14 15:12:09 id=13 trace_id=1202 func=__ip_session_run_tuple line=2509 msg="SNAT 10.9.193.232->10.10.10.101:45211" 2013-06-14 15:12:09 freeConn 70 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 ipsapp us 11 write (1,204) 2013-06-14 15:12:09 [65]-ssl_loop.c:mainLoop:3444 nready=1 errno=0 2013-06-14 15:12:09 ipsapp us 11 read (0,2048) 2013-06-14 15:12:09 ipsapp ses 70 msg 147 recv session end ack 2013-06-14 15:12:10 id=13 trace_id=1203 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." 2013-06-14 15:12:11 [0]-ssl_acceptor.c:mainLoop:1248 nready=0 errno=0 2013-06-14 15:12:16 [65]-ssl_loop.c:mainLoop:3449 nready=0 errno=0 2013-06-14 15:12:16 [65]-shrinking memory 116081 -> 41553 2013-06-14 15:12:16 [65]-shrink succeed 2013-06-14 15:12:16 [0]-ssl_acceptor.c:mainLoop:1248 nready=0 errno=0 2013-06-14 15:12:21 [0]-ssl_acceptor.c:mainLoop:1248 nready=0 errno=0 webfilter (root) # webfilter (root) # webfilter (root) # 2013-06-14 15:12:26 [0]-ssl_acceptor.c:mainLoop:1248 nready=0 errno=0 2013-06-14 15:12:26 id=13 trace_id=1204 func=resolve_ip_tuple_fast line=4299 msg="vd-root received a packet(proto=6, 10.9.193.232:45210->74.125.229.178:443) from local." diag debug disable webfilter (root) # diag debug reset webfilter (root) # webfilter (root) # ^Dexit