reaper@PA-VM> debug dataplane packet-diag clear all

Packet diagnosis setting set to default.

reaper@PA-VM> debug dataplane packet-diag clear filter-marked-session all

Unmark All sessions in packet debug

reaper@PA-VM> debug dataplane packet-diag set filter match source 10.0.0.10
destination 198.51.100.2

reaper@PA-VM> debug dataplane packet-diag set filter match source 10.0.0.10

destination 198.51.100.1

reaper@PA-VM> debug dataplane packet-diag set filter match source 198.51.100.1

destination 198.51.100.2

reaper@PA-VM> debug dataplane packet-diag set filter match destination 198.51.100.2

reaper@PA-VM> debug dataplane packet-diag set filter on

debug packet filter: on

reaper@PA-VM> show session all filter source 10.0.0.10

No Active Sessions
reaper@PA-VM> set session offload no

reaper@PA-VM> debug dataplane packet-diag set log feature flow basic

reaper@PA-VM> debug dataplane packet-diag set log on

Packet log is enabled

reaper@PA-VM> show counter global filter delta yes packet-filter yes

Global counters:
Elapsed time since last sampling: 159.191 seconds

name value rate severity category aspect

description
--------------------------------------------------------------------------------
pkt_recv 2 0 info packet pktproc
Packets received
pkt_sent 14 0 info packet pktproc
Packets transmitted
pkt_stp_rcv 2 0 info packet pktproc
STP BPDU packets received
flow_arp_pkt_rcv 2 0 info flow arp
ARP packets received
flow_arp_rcv_gratuitous 2 0 info flow arp
Gratuitous ARP packets received
flow_ip_cksm_sw_validation 9 0 info flow pktproc
Packets for which IP checksum validation was done in software
log_pkt_diag_us 82 0 info log system
Time (us) spent on writing packet-diag logs
--------------------------------------------------------------------------------
Total counters shown: 7
--------------------------------------------------------------------------------

reaper@PA-VM> show counter global filter delta yes packet-filter yes

Global counters:
Elapsed time since last sampling: 5.588 seconds

--------------------------------------------------------------------------------
Total counters shown: 0
--------------------------------------------------------------------------------

reaper@PA-VM> show se
> service-chain Show service chain information
> session Show session information

reaper@PA-VM> show session all filter source 10.0.0.10

No Active Sessions
reaper@PA-VM> show counter global filter delta yes packet-filter yes

Global counters:
Elapsed time since last sampling: 24.931 seconds

--------------------------------------------------------------------------------
Total counters shown: 0
--------------------------------------------------------------------------------

reaper@PA-VM> show session all filter source 10.0.0.10

No Active Sessions
reaper@PA-VM> show counter global filter delta yes packet-filter yes

Global counters:
Elapsed time since last sampling: 13.132 seconds

name value rate severity category aspect

description
--------------------------------------------------------------------------------
session_allocated 4 0 info session resource
Sessions allocated
session_freed 4 0 info session resource
Sessions freed
flow_policy_nat_land 4 0 drop flow session
Session setup: source NAT IP allocation result in LAND attack
nat_dynamic_port_xlat 4 0 info nat resource
The total number of dynamic_ip_port NAT translate called
nat_dynamic_port_release 8 0 info nat resource
The total number of dynamic_ip_port NAT release called
log_pkt_diag_us 262 19 info log system
Time (us) spent on writing packet-diag logs
session_freed 1 0 info session resource
Sessions freed
flow_policy_nat_land 1 0 drop flow session
Session setup: source NAT IP allocation result in LAND attack
ctd_fwd_err_tcp_state 1 0 info ctd pktproc
Forward to varrcvr error: TCP in establishment when session went away
--------------------------------------------------------------------------------
Total counters shown: 9
--------------------------------------------------------------------------------

reaper@PA-VM> show session all filter source 10.0.0.10

No Active Sessions
reaper@PA-VM> show session all filter source 10.0.0.10
--------------------------------------------------------------------------------
ID Application State Type Flag Src[Sport]/Zone/Proto (translated
IP[Port])
Vsys Dst[Dport]/Zone (translated IP[Port])
--------------------------------------------------------------------------------
270 ssh ACTIVE FLOW NS 10.0.0.10[49402]/trust/6
(198.51.100.2[12607])
vsys1 198.51.100.1[22]/untrust
(198.51.100.1[22])
reaper@PA-VM> show se
> service-chain Show service chain information
> session Show session information

reaper@PA-VM> show session id 270

Session 270

c2s flow:
source: 10.0.0.10 [trust]
dst: 198.51.100.1
proto: 6
sport: 49402 dport: 22
state: ACTIVE type: FLOW
src user: unknown
dst user: unknown

s2c flow:
source: 198.51.100.1 [untrust]
dst: 198.51.100.2
proto: 6
sport: 22 dport: 12607
state: ACTIVE type: FLOW
src user: unknown
dst user: unknown

start time : Thu Jun 4 00:46:11 2020

timeout : 3600 sec
time to live : 3589 sec
total byte count(c2s) : 3961
total byte count(s2c) : 6143
layer7 packet count(c2s) : 22
layer7 packet count(s2c) : 27
vsys : vsys1
application : ssh
rule : outbound
service timeout override(index) : False
session to be logged at end : True
session in session ager : True
session updated by HA peer : False
address/port translation : source
nat-rule : outbound hide(vsys1)
layer7 processing : completed
URL filtering enabled : True
URL category : any
session via syn-cookies : False
session terminated on host : False
session traverses tunnel : False
session terminate tunnel : False
 captive portal session : False
ingress interface : ethernet1/2
egress interface : ethernet1/1
session QoS rule : N/A (class 4)
tracker stage l7proc : ctd decoder done
end-reason : unknown
reaper@PA-VM>
reaper@PA-VM> show counter global filter delta yes packet-filter yes

Global counters:
Elapsed time since last sampling: 55.235 seconds

name value rate severity category aspect

description
--------------------------------------------------------------------------------
pkt_recv 5 0 info packet pktproc
Packets received
pkt_sent 20 0 info packet pktproc
Packets transmitted
session_allocated 1 0 info session resource
Sessions allocated
flow_ip_cksm_sw_validation 27 0 info flow pktproc
Packets for which IP checksum validation was done in software
nat_dynamic_port_xlat 1 0 info nat resource
The total number of dynamic_ip_port NAT translate called
nat_dynamic_port_release 2 0 info nat resource
The total number of dynamic_ip_port NAT release called
dfa_sw 4 0 info dfa pktproc
The total number of dfa match using software
ctd_sml_exit_detector_i 1 0 info ctd pktproc
The number of sessions with sml exit in detector i
ctd_run_detector_i 1 0 info ctd pktproc
run detector_i
ctd_sml_vm_run_impl_opcodeexit 1 0 info ctd pktproc
SML VM opcode exit
ctd_pscan_sw 4 0 info ctd pktproc
The total usage of software for pscan
ctd_pkt_slowpath 4 0 info ctd pktproc
Packets processed by slowpath
log_pkt_diag_us 303 5 info log system
Time (us) spent on writing packet-diag logs
--------------------------------------------------------------------------------
Total counters shown: 13
--------------------------------------------------------------------------------

reaper@PA-VM> show session all filter source 10.0.0.10

--------------------------------------------------------------------------------
ID Application State Type Flag Src[Sport]/Zone/Proto (translated
IP[Port])
Vsys Dst[Dport]/Zone (translated IP[Port])
--------------------------------------------------------------------------------
270 ssh ACTIVE FLOW NS 10.0.0.10[49402]/trust/6
(198.51.100.2[12607])
vsys1 198.51.100.1[22]/untrust
(198.51.100.1[22])
reaper@PA-VM> show session all filter source 10.0.0.10

No Active Sessions
reaper@PA-VM> show counter global filter delta yes packet-filter yes

Global counters:
Elapsed time since last sampling: 54.857 seconds

name value rate severity category aspect

description
--------------------------------------------------------------------------------
pkt_recv 3 0 info packet pktproc
Packets received
pkt_sent 14 0 info packet pktproc
Packets transmitted
flow_ip_cksm_sw_validation 9 0 info flow pktproc
Packets for which IP checksum validation was done in software
log_pkt_diag_us 100 1 info log system
Time (us) spent on writing packet-diag logs
--------------------------------------------------------------------------------
Total counters shown: 4
--------------------------------------------------------------------------------

reaper@PA-VM> debug dataplane packet-diag set log off

Packet log is disabled

reaper@PA-VM> debug dataplane packet-diag aggregate-logs

pan_packet_diag.log is aggregated

reaper@PA-VM> set session offload yes

reaper@PA-VM> less mp-log pan_packet_diag.log