026345: *Aug 10 19:04:00.324 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026346: *Aug 10 19:04:00.324 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026347: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_from_addr 026348: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_sip_URI 026349: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_to_addr 026350: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_sip_URI 026351: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_sip_URI 026352: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_cseq 026353: *Aug 10 19:04:00.324 EST: CCE: sip_fetch_seq_no 026354: *Aug 10 19:04:00.328 EST: CCE: All mandatory header fields for REGISTER are present 026355: *Aug 10 19:04:00.328 EST: CCE: No forbidden header field for REGISTER is present 026356: *Aug 10 19:04:00.328 EST: CCE: SIP : SIP session state = 1 026357: *Aug 10 19:04:00.328 EST: CCE: Last class in child policy = C0000025 026358: *Aug 10 19:04:00.407 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026359: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_from_addr 026360: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_sip_URI 026361: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_to_addr 026362: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_sip_URI 026363: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_cseq 026364: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_seq_no 026365: *Aug 10 19:04:00.407 EST: CCE: sip_fetch_sip_URI 026366: *Aug 10 19:04:00.407 EST: CCE: All mandatory header fields for 100 are present 026367: *Aug 10 19:04:00.407 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026368: *Aug 10 19:04:00.407 EST: CCE: SIP : Forbidden header field present 026369: *Aug 10 19:04:00.407 EST: FIREWALL sis 8514B7C0: *** protocol error found *** 026370: *Aug 10 19:04:00.407 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026371: *Aug 10 19:04:00.407 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026372: *Aug 10 19:04:00.407 EST: FIREWALL: Pregen without any dialog 026373: *Aug 10 19:04:00.411 EST: FIREWALL sis 8514B7C0: Sis extension deleted 026374: *Aug 10 19:04:00.411 EST: %FW-6-DROP_PKT: Dropping udp session 12.238.153.251:5060 10.240.0.101:5060 with ip ident 0 026375: *Aug 10 19:04:01.323 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026376: *Aug 10 19:04:01.323 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026377: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_from_addr 026378: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_sip_URI 026379: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_to_addr 026380: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_sip_URI 026381: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_sip_URI 026382: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_cseq 026383: *Aug 10 19:04:01.323 EST: CCE: sip_fetch_seq_no 026384: *Aug 10 19:04:01.323 EST: CCE: All mandatory header fields for REGISTER are present 026385: *Aug 10 19:04:01.323 EST: CCE: No forbidden header field for REGISTER is present 026386: *Aug 10 19:04:01.323 EST: CCE: SIP : SIP session state = 1 026387: *Aug 10 19:04:01.323 EST: CCE: Last class in child policy = C0000025 026388: *Aug 10 19:04:01.403 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026389: *Aug 10 19:04:01.403 EST: CCE: sip_fetch_from_addr 026390: *Aug 10 19:04:01.403 EST: CCE: sip_fetch_sip_URI 026391: *Aug 10 19:04:01.403 EST: CCE: sip_fetch_to_addr 026392: *Aug 10 19:04:01.403 EST: CCE: sip_fetch_sip_URI 026393: *Aug 10 19:04:01.407 EST: CCE: sip_fetch_cseq 026394: *Aug 10 19:04:01.407 EST: CCE: sip_fetch_seq_no 026395: *Aug 10 19:04:01.407 EST: CCE: sip_fetch_sip_URI 026396: *Aug 10 19:04:01.407 EST: CCE: All mandatory header fields for 100 are present 026397: *Aug 10 19:04:01.407 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026398: *Aug 10 19:04:01.407 EST: CCE: SIP : Forbidden header field present 026399: *Aug 10 19:04:01.407 EST: FIREWALL sis 8514ABC0: *** protocol error found *** 026400: *Aug 10 19:04:01.407 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026401: *Aug 10 19:04:01.407 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026402: *Aug 10 19:04:01.407 EST: FIREWALL: Pregen without any dialog 026403: *Aug 10 19:04:01.407 EST: FIREWALL sis 8514ABC0: Sis extension deleted 026404: *Aug 10 19:04:02.507 EST: %FW-6-LOG_SUMMARY: 2 packets were dropped from 12.238.153.251:5060 => 10.240.0.101:5060 (target:class)-(OutsideToInside:class-default) 026405: *Aug 10 19:04:03.323 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026406: *Aug 10 19:04:03.323 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026407: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_from_addr 026408: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_sip_URI 026409: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_to_addr 026410: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_sip_URI 026411: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_sip_URI 026412: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_cseq 026413: *Aug 10 19:04:03.323 EST: CCE: sip_fetch_seq_no 026414: *Aug 10 19:04:03.323 EST: CCE: All mandatory header fields for REGISTER are present 026415: *Aug 10 19:04:03.323 EST: CCE: No forbidden header field for REGISTER is present 026416: *Aug 10 19:04:03.323 EST: CCE: SIP : SIP session state = 1 026417: *Aug 10 19:04:03.327 EST: CCE: Last class in child policy = C0000025 026418: *Aug 10 19:04:03.403 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026419: *Aug 10 19:04:03.403 EST: CCE: sip_fetch_from_addr 026420: *Aug 10 19:04:03.403 EST: CCE: sip_fetch_sip_URI 026421: *Aug 10 19:04:03.403 EST: CCE: sip_fetch_to_addr 026422: *Aug 10 19:04:03.403 EST: CCE: sip_fetch_sip_URI 026423: *Aug 10 19:04:03.403 EST: CCE: sip_fetch_cseq 026424: *Aug 10 19:04:03.407 EST: CCE: sip_fetch_seq_no 026425: *Aug 10 19:04:03.407 EST: CCE: sip_fetch_sip_URI 026426: *Aug 10 19:04:03.407 EST: CCE: All mandatory header fields for 100 are present 026427: *Aug 10 19:04:03.407 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026428: *Aug 10 19:04:03.407 EST: CCE: SIP : Forbidden header field present 026429: *Aug 10 19:04:03.407 EST: FIREWALL sis 851483C0: *** protocol error found *** 026430: *Aug 10 19:04:03.407 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026431: *Aug 10 19:04:03.407 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026432: *Aug 10 19:04:03.407 EST: FIREWALL: Pregen without any dialog 026433: *Aug 10 19:04:03.407 EST: FIREWALL sis 851483C0: Sis extension deleted 026434: *Aug 10 19:04:07.322 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026435: *Aug 10 19:04:07.322 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026436: *Aug 10 19:04:07.322 EST: CCE: sip_fetch_from_addr 026437: *Aug 10 19:04:07.322 EST: CCE: sip_fetch_sip_URI 026438: *Aug 10 19:04:07.322 EST: CCE: sip_fetch_to_addr 026439: *Aug 10 19:04:07.322 EST: CCE: sip_fetch_sip_URI 026440: *Aug 10 19:04:07.322 EST: CCE: sip_fetch_sip_URI 026441: *Aug 10 19:04:07.322 EST: CCE: sip_fetch_cseq 026442: *Aug 10 19:04:07.326 EST: CCE: sip_fetch_seq_no 026443: *Aug 10 19:04:07.326 EST: CCE: All mandatory header fields for REGISTER are present 026444: *Aug 10 19:04:07.326 EST: CCE: No forbidden header field for REGISTER is present 026445: *Aug 10 19:04:07.326 EST: CCE: SIP : SIP session state = 1 026446: *Aug 10 19:04:07.326 EST: CCE: Last class in child policy = C0000025 026447: *Aug 10 19:04:07.402 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026448: *Aug 10 19:04:07.402 EST: CCE: sip_fetch_from_addr 026449: *Aug 10 19:04:07.406 EST: CCE: sip_fetch_sip_URI 026450: *Aug 10 19:04:07.406 EST: CCE: sip_fetch_to_addr 026451: *Aug 10 19:04:07.406 EST: CCE: sip_fetch_sip_URI 026452: *Aug 10 19:04:07.406 EST: CCE: sip_fetch_cseq 026453: *Aug 10 19:04:07.406 EST: CCE: sip_fetch_seq_no 026454: *Aug 10 19:04:07.406 EST: CCE: sip_fetch_sip_URI 026455: *Aug 10 19:04:07.406 EST: CCE: All mandatory header fields for 100 are present 026456: *Aug 10 19:04:07.406 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026457: *Aug 10 19:04:07.406 EST: CCE: SIP : Forbidden header field present 026458: *Aug 10 19:04:07.406 EST: FIREWALL sis 851443C0: *** protocol error found *** 026459: *Aug 10 19:04:07.406 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026460: *Aug 10 19:04:07.406 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026461: *Aug 10 19:04:07.406 EST: FIREWALL: Pregen without any dialog 026462: *Aug 10 19:04:07.406 EST: FIREWALL sis 851443C0: Sis extension deleted 026463: *Aug 10 19:04:11.320 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026464: *Aug 10 19:04:11.320 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026465: *Aug 10 19:04:11.320 EST: CCE: sip_fetch_from_addr 026466: *Aug 10 19:04:11.324 EST: CCE: sip_fetch_sip_URI 026467: *Aug 10 19:04:11.324 EST: CCE: sip_fetch_to_addr 026468: *Aug 10 19:04:11.324 EST: CCE: sip_fetch_sip_URI 026469: *Aug 10 19:04:11.324 EST: CCE: sip_fetch_sip_URI 026470: *Aug 10 19:04:11.324 EST: CCE: sip_fetch_cseq 026471: *Aug 10 19:04:11.324 EST: CCE: sip_fetch_seq_no 026472: *Aug 10 19:04:11.324 EST: CCE: All mandatory header fields for REGISTER are present 026473: *Aug 10 19:04:11.324 EST: CCE: No forbidden header field for REGISTER is present 026474: *Aug 10 19:04:11.324 EST: CCE: SIP : SIP session state = 1 026475: *Aug 10 19:04:11.324 EST: CCE: Last class in child policy = C0000025 026476: *Aug 10 19:04:11.404 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026477: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_from_addr 026478: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_sip_URI 026479: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_to_addr 026480: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_sip_URI 026481: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_cseq 026482: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_seq_no 026483: *Aug 10 19:04:11.404 EST: CCE: sip_fetch_sip_URI 026484: *Aug 10 19:04:11.404 EST: CCE: All mandatory header fields for 100 are present 026485: *Aug 10 19:04:11.404 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026486: *Aug 10 19:04:11.404 EST: CCE: SIP : Forbidden header field present 026487: *Aug 10 19:04:11.404 EST: FIREWALL sis 85140DC0: *** protocol error found *** 026488: *Aug 10 19:04:11.404 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026489: *Aug 10 19:04:11.404 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026490: *Aug 10 19:04:11.408 EST: FIREWALL: Pregen without any dialog 026491: *Aug 10 19:04:11.408 EST: FIREWALL sis 85140DC0: Sis extension deleted 026492: *Aug 10 19:04:35.322 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026493: *Aug 10 19:04:35.322 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026494: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_from_addr 026495: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_sip_URI 026496: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_to_addr 026497: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_sip_URI 026498: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_sip_URI 026499: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_cseq 026500: *Aug 10 19:04:35.322 EST: CCE: sip_fetch_seq_no 026501: *Aug 10 19:04:35.322 EST: CCE: All mandatory header fields for REGISTER are present 026502: *Aug 10 19:04:35.322 EST: CCE: No forbidden header field for REGISTER is present 026503: *Aug 10 19:04:35.326 EST: CCE: SIP : SIP session state = 1 026504: *Aug 10 19:04:35.326 EST: CCE: Last class in child policy = C0000025 026505: *Aug 10 19:04:35.402 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026506: *Aug 10 19:04:35.402 EST: CCE: sip_fetch_from_addr 026507: *Aug 10 19:04:35.402 EST: CCE: sip_fetch_sip_URI 026508: *Aug 10 19:04:35.402 EST: CCE: sip_fetch_to_addr 026509: *Aug 10 19:04:35.406 EST: CCE: sip_fetch_sip_URI 026510: *Aug 10 19:04:35.406 EST: CCE: sip_fetch_cseq 026511: *Aug 10 19:04:35.406 EST: CCE: sip_fetch_seq_no 026512: *Aug 10 19:04:35.406 EST: CCE: sip_fetch_sip_URI 026513: *Aug 10 19:04:35.406 EST: CCE: All mandatory header fields for 100 are present 026514: *Aug 10 19:04:35.406 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026515: *Aug 10 19:04:35.406 EST: CCE: SIP : Forbidden header field present 026516: *Aug 10 19:04:35.406 EST: FIREWALL sis 845A0BE0: *** protocol error found *** 026517: *Aug 10 19:04:35.406 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026518: *Aug 10 19:04:35.406 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026519: *Aug 10 19:04:35.406 EST: FIREWALL: Pregen without any dialog 026520: *Aug 10 19:04:35.406 EST: FIREWALL sis 845A0BE0: Sis extension deleted 026521: *Aug 10 19:04:35.406 EST: %FW-6-DROP_PKT: Dropping udp session 12.238.153.251:5060 10.240.0.101:5060 with ip ident 0 026522: *Aug 10 19:04:36.321 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026523: *Aug 10 19:04:36.321 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026524: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_from_addr 026525: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_sip_URI 026526: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_to_addr 026527: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_sip_URI 026528: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_sip_URI 026529: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_cseq 026530: *Aug 10 19:04:36.321 EST: CCE: sip_fetch_seq_no 026531: *Aug 10 19:04:36.321 EST: CCE: All mandatory header fields for REGISTER are present 026532: *Aug 10 19:04:36.321 EST: CCE: No forbidden header field for REGISTER is present 026533: *Aug 10 19:04:36.321 EST: CCE: SIP : SIP session state = 1 026534: *Aug 10 19:04:36.321 EST: CCE: Last class in child policy = C0000025 026535: *Aug 10 19:04:36.401 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026536: *Aug 10 19:04:36.401 EST: CCE: sip_fetch_from_addr 026537: *Aug 10 19:04:36.401 EST: CCE: sip_fetch_sip_URI 026538: *Aug 10 19:04:36.401 EST: CCE: sip_fetch_to_addr 026539: *Aug 10 19:04:36.401 EST: CCE: sip_fetch_sip_URI 026540: *Aug 10 19:04:36.401 EST: CCE: sip_fetch_cseq 026541: *Aug 10 19:04:36.401 EST: CCE: sip_fetch_seq_no 026542: *Aug 10 19:04:36.405 EST: CCE: sip_fetch_sip_URI 026543: *Aug 10 19:04:36.405 EST: CCE: All mandatory header fields for 100 are present 026544: *Aug 10 19:04:36.405 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026545: *Aug 10 19:04:36.405 EST: CCE: SIP : Forbidden header field present 026546: *Aug 10 19:04:36.405 EST: FIREWALL sis 8459D9E0: *** protocol error found *** 026547: *Aug 10 19:04:36.405 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026548: *Aug 10 19:04:36.405 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026549: *Aug 10 19:04:36.405 EST: FIREWALL: Pregen without any dialog 026550: *Aug 10 19:04:36.405 EST: FIREWALL sis 8459D9E0: Sis extension deleted 026551: *Aug 10 19:04:38.321 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026552: *Aug 10 19:04:38.321 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026553: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_from_addr 026554: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_sip_URI 026555: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_to_addr 026556: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_sip_URI 026557: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_sip_URI 026558: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_cseq 026559: *Aug 10 19:04:38.321 EST: CCE: sip_fetch_seq_no 026560: *Aug 10 19:04:38.321 EST: CCE: All mandatory header fields for REGISTER are present 026561: *Aug 10 19:04:38.321 EST: CCE: No forbidden header field for REGISTER is present 026562: *Aug 10 19:04:38.325 EST: CCE: SIP : SIP session state = 1 026563: *Aug 10 19:04:38.325 EST: CCE: Last class in child policy = C0000025 026564: *Aug 10 19:04:38.401 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026565: *Aug 10 19:04:38.401 EST: CCE: sip_fetch_from_addr 026566: *Aug 10 19:04:38.401 EST: CCE: sip_fetch_sip_URI 026567: *Aug 10 19:04:38.405 EST: CCE: sip_fetch_to_addr 026568: *Aug 10 19:04:38.405 EST: CCE: sip_fetch_sip_URI 026569: *Aug 10 19:04:38.405 EST: CCE: sip_fetch_cseq 026570: *Aug 10 19:04:38.405 EST: CCE: sip_fetch_seq_no 026571: *Aug 10 19:04:38.405 EST: CCE: sip_fetch_sip_URI 026572: *Aug 10 19:04:38.405 EST: CCE: All mandatory header fields for 100 are present 026573: *Aug 10 19:04:38.405 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026574: *Aug 10 19:04:38.405 EST: CCE: SIP : Forbidden header field present 026575: *Aug 10 19:04:38.405 EST: FIREWALL sis 845A91E0: *** protocol error found *** 026576: *Aug 10 19:04:38.405 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026577: *Aug 10 19:04:38.405 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026578: *Aug 10 19:04:38.405 EST: FIREWALL: Pregen without any dialog 026579: *Aug 10 19:04:38.405 EST: FIREWALL sis 845A91E0: Sis extension deleted 026580: *Aug 10 19:04:42.320 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026581: *Aug 10 19:04:42.320 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026582: *Aug 10 19:04:42.320 EST: CCE: sip_fetch_from_addr 026583: *Aug 10 19:04:42.320 EST: CCE: sip_fetch_sip_URI 026584: *Aug 10 19:04:42.320 EST: CCE: sip_fetch_to_addr 026585: *Aug 10 19:04:42.320 EST: CCE: sip_fetch_sip_URI 026586: *Aug 10 19:04:42.324 EST: CCE: sip_fetch_sip_URI 026587: *Aug 10 19:04:42.324 EST: CCE: sip_fetch_cseq 026588: *Aug 10 19:04:42.324 EST: CCE: sip_fetch_seq_no 026589: *Aug 10 19:04:42.324 EST: CCE: All mandatory header fields for REGISTER are present 026590: *Aug 10 19:04:42.324 EST: CCE: No forbidden header field for REGISTER is present 026591: *Aug 10 19:04:42.324 EST: CCE: SIP : SIP session state = 1 026592: *Aug 10 19:04:42.324 EST: CCE: Last class in child policy = C0000025 026593: *Aug 10 19:04:42.400 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026594: *Aug 10 19:04:42.400 EST: CCE: sip_fetch_from_addr 026595: *Aug 10 19:04:42.404 EST: CCE: sip_fetch_sip_URI 026596: *Aug 10 19:04:42.404 EST: CCE: sip_fetch_to_addr 026597: *Aug 10 19:04:42.404 EST: CCE: sip_fetch_sip_URI 026598: *Aug 10 19:04:42.404 EST: CCE: sip_fetch_cseq 026599: *Aug 10 19:04:42.404 EST: CCE: sip_fetch_seq_no 026600: *Aug 10 19:04:42.404 EST: CCE: sip_fetch_sip_URI 026601: *Aug 10 19:04:42.404 EST: CCE: All mandatory header fields for 100 are present 026602: *Aug 10 19:04:42.404 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026603: *Aug 10 19:04:42.404 EST: CCE: SIP : Forbidden header field present 026604: *Aug 10 19:04:42.404 EST: FIREWALL sis 851433C0: *** protocol error found *** 026605: *Aug 10 19:04:42.404 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026606: *Aug 10 19:04:42.404 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026607: *Aug 10 19:04:42.404 EST: FIREWALL: Pregen without any dialog 026608: *Aug 10 19:04:42.404 EST: FIREWALL sis 851433C0: Sis extension deleted 026609: *Aug 10 19:04:46.319 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026610: *Aug 10 19:04:46.319 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026611: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_from_addr 026612: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_sip_URI 026613: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_to_addr 026614: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_sip_URI 026615: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_sip_URI 026616: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_cseq 026617: *Aug 10 19:04:46.323 EST: CCE: sip_fetch_seq_no 026618: *Aug 10 19:04:46.323 EST: CCE: All mandatory header fields for REGISTER are present 026619: *Aug 10 19:04:46.323 EST: CCE: No forbidden header field for REGISTER is present 026620: *Aug 10 19:04:46.323 EST: CCE: SIP : SIP session state = 1 026621: *Aug 10 19:04:46.323 EST: CCE: Last class in child policy = C0000025 026622: *Aug 10 19:04:46.403 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026623: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_from_addr 026624: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_sip_URI 026625: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_to_addr 026626: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_sip_URI 026627: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_cseq 026628: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_seq_no 026629: *Aug 10 19:04:46.403 EST: CCE: sip_fetch_sip_URI 026630: *Aug 10 19:04:46.403 EST: CCE: All mandatory header fields for 100 are present 026631: *Aug 10 19:04:46.403 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026632: *Aug 10 19:04:46.403 EST: CCE: SIP : Forbidden header field present 026633: *Aug 10 19:04:46.403 EST: FIREWALL sis 851481C0: *** protocol error found *** 026634: *Aug 10 19:04:46.403 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026635: *Aug 10 19:04:46.403 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026636: *Aug 10 19:04:46.407 EST: FIREWALL: Pregen without any dialog 026637: *Aug 10 19:04:46.407 EST: FIREWALL sis 851481C0: Sis extension deleted 026638: *Aug 10 19:05:02.490 EST: %FW-6-LOG_SUMMARY: 8 packets were dropped from 12.238.153.251:5060 => 10.240.0.101:5060 (target:class)-(OutsideToInside:class-default) 026639: *Aug 10 19:05:02.490 EST: %FW-6-LOG_SUMMARY: 1 packet were dropped from 87.150.7.193:0 => 10.240.0.110:3 (target:class)-(OutsideToInside:class-default) 026640: *Aug 10 19:05:10.320 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026641: *Aug 10 19:05:10.320 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026642: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_from_addr 026643: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_sip_URI 026644: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_to_addr 026645: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_sip_URI 026646: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_sip_URI 026647: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_cseq 026648: *Aug 10 19:05:10.320 EST: CCE: sip_fetch_seq_no 026649: *Aug 10 19:05:10.324 EST: CCE: All mandatory header fields for REGISTER are present 026650: *Aug 10 19:05:10.324 EST: CCE: No forbidden header field for REGISTER is present 026651: *Aug 10 19:05:10.324 EST: CCE: SIP : SIP session state = 1 026652: *Aug 10 19:05:10.324 EST: CCE: Last class in child policy = C0000025 026653: *Aug 10 19:05:10.400 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026654: *Aug 10 19:05:10.400 EST: CCE: sip_fetch_from_addr 026655: *Aug 10 19:05:10.404 EST: CCE: sip_fetch_sip_URI 026656: *Aug 10 19:05:10.404 EST: CCE: sip_fetch_to_addr 026657: *Aug 10 19:05:10.404 EST: CCE: sip_fetch_sip_URI 026658: *Aug 10 19:05:10.404 EST: CCE: sip_fetch_cseq 026659: *Aug 10 19:05:10.404 EST: CCE: sip_fetch_seq_no 026660: *Aug 10 19:05:10.404 EST: CCE: sip_fetch_sip_URI 026661: *Aug 10 19:05:10.404 EST: CCE: All mandatory header fields for 100 are present 026662: *Aug 10 19:05:10.404 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026663: *Aug 10 19:05:10.404 EST: CCE: SIP : Forbidden header field present 026664: *Aug 10 19:05:10.404 EST: FIREWALL sis 8459CFE0: *** protocol error found *** 026665: *Aug 10 19:05:10.404 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026666: *Aug 10 19:05:10.404 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026667: *Aug 10 19:05:10.404 EST: FIREWALL: Pregen without any dialog 026668: *Aug 10 19:05:10.404 EST: FIREWALL sis 8459CFE0: Sis extension deleted 026669: *Aug 10 19:05:10.404 EST: %FW-6-DROP_PKT: Dropping udp session 12.238.153.251:5060 10.240.0.101:5060 with ip ident 0 026670: *Aug 10 19:05:11.320 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026671: *Aug 10 19:05:11.320 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026672: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_from_addr 026673: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_sip_URI 026674: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_to_addr 026675: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_sip_URI 026676: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_sip_URI 026677: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_cseq 026678: *Aug 10 19:05:11.320 EST: CCE: sip_fetch_seq_no 026679: *Aug 10 19:05:11.320 EST: CCE: All mandatory header fields for REGISTER are present 026680: *Aug 10 19:05:11.320 EST: CCE: No forbidden header field for REGISTER is present 026681: *Aug 10 19:05:11.324 EST: CCE: SIP : SIP session state = 1 026682: *Aug 10 19:05:11.324 EST: CCE: Last class in child policy = C0000025 026683: *Aug 10 19:05:11.400 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026684: *Aug 10 19:05:11.400 EST: CCE: sip_fetch_from_addr 026685: *Aug 10 19:05:11.400 EST: CCE: sip_fetch_sip_URI 026686: *Aug 10 19:05:11.400 EST: CCE: sip_fetch_to_addr 026687: *Aug 10 19:05:11.400 EST: CCE: sip_fetch_sip_URI 026688: *Aug 10 19:05:11.400 EST: CCE: sip_fetch_cseq 026689: *Aug 10 19:05:11.404 EST: CCE: sip_fetch_seq_no 026690: *Aug 10 19:05:11.404 EST: CCE: sip_fetch_sip_URI 026691: *Aug 10 19:05:11.404 EST: CCE: All mandatory header fields for 100 are present 026692: *Aug 10 19:05:11.404 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026693: *Aug 10 19:05:11.404 EST: CCE: SIP : Forbidden header field present 026694: *Aug 10 19:05:11.404 EST: FIREWALL sis 845A73E0: *** protocol error found *** 026695: *Aug 10 19:05:11.404 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026696: *Aug 10 19:05:11.404 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026697: *Aug 10 19:05:11.404 EST: FIREWALL: Pregen without any dialog 026698: *Aug 10 19:05:11.404 EST: FIREWALL sis 845A73E0: Sis extension deleted 026699: *Aug 10 19:05:13.319 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026700: *Aug 10 19:05:13.319 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026701: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_from_addr 026702: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_sip_URI 026703: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_to_addr 026704: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_sip_URI 026705: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_sip_URI 026706: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_cseq 026707: *Aug 10 19:05:13.319 EST: CCE: sip_fetch_seq_no 026708: *Aug 10 19:05:13.323 EST: CCE: All mandatory header fields for REGISTER are present 026709: *Aug 10 19:05:13.323 EST: CCE: No forbidden header field for REGISTER is present 026710: *Aug 10 19:05:13.323 EST: CCE: SIP : SIP session state = 1 026711: *Aug 10 19:05:13.323 EST: CCE: Last class in child policy = C0000025 026712: *Aug 10 19:05:13.399 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026713: *Aug 10 19:05:13.399 EST: CCE: sip_fetch_from_addr 026714: *Aug 10 19:05:13.403 EST: CCE: sip_fetch_sip_URI 026715: *Aug 10 19:05:13.403 EST: CCE: sip_fetch_to_addr 026716: *Aug 10 19:05:13.403 EST: CCE: sip_fetch_sip_URI 026717: *Aug 10 19:05:13.403 EST: CCE: sip_fetch_cseq 026718: *Aug 10 19:05:13.403 EST: CCE: sip_fetch_seq_no 026719: *Aug 10 19:05:13.403 EST: CCE: sip_fetch_sip_URI 026720: *Aug 10 19:05:13.403 EST: CCE: All mandatory header fields for 100 are present 026721: *Aug 10 19:05:13.403 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026722: *Aug 10 19:05:13.403 EST: CCE: SIP : Forbidden header field present 026723: *Aug 10 19:05:13.403 EST: FIREWALL sis 8459C7E0: *** protocol error found *** 026724: *Aug 10 19:05:13.403 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026725: *Aug 10 19:05:13.403 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026726: *Aug 10 19:05:13.403 EST: FIREWALL: Pregen without any dialog 026727: *Aug 10 19:05:13.403 EST: FIREWALL sis 8459C7E0: Sis extension deleted 026728: *Aug 10 19:05:17.318 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026729: *Aug 10 19:05:17.318 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026730: *Aug 10 19:05:17.318 EST: CCE: sip_fetch_from_addr 026731: *Aug 10 19:05:17.318 EST: CCE: sip_fetch_sip_URI 026732: *Aug 10 19:05:17.322 EST: CCE: sip_fetch_to_addr 026733: *Aug 10 19:05:17.322 EST: CCE: sip_fetch_sip_URI 026734: *Aug 10 19:05:17.322 EST: CCE: sip_fetch_sip_URI 026735: *Aug 10 19:05:17.322 EST: CCE: sip_fetch_cseq 026736: *Aug 10 19:05:17.322 EST: CCE: sip_fetch_seq_no 026737: *Aug 10 19:05:17.322 EST: CCE: All mandatory header fields for REGISTER are present 026738: *Aug 10 19:05:17.322 EST: CCE: No forbidden header field for REGISTER is present 026739: *Aug 10 19:05:17.322 EST: CCE: SIP : SIP session state = 1 026740: *Aug 10 19:05:17.322 EST: CCE: Last class in child policy = C0000025 026741: *Aug 10 19:05:17.402 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026742: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_from_addr 026743: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_sip_URI 026744: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_to_addr 026745: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_sip_URI 026746: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_cseq 026747: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_seq_no 026748: *Aug 10 19:05:17.402 EST: CCE: sip_fetch_sip_URI 026749: *Aug 10 19:05:17.402 EST: CCE: All mandatory header fields for 100 are present 026750: *Aug 10 19:05:17.402 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026751: *Aug 10 19:05:17.402 EST: CCE: SIP : Forbidden header field present 026752: *Aug 10 19:05:17.402 EST: FIREWALL sis 845A3FE0: *** protocol error found *** 026753: *Aug 10 19:05:17.402 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026754: *Aug 10 19:05:17.402 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026755: *Aug 10 19:05:17.406 EST: FIREWALL: Pregen without any dialog 026756: *Aug 10 19:05:17.406 EST: FIREWALL sis 845A3FE0: Sis extension deleted 026757: *Aug 10 19:05:21.317 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026758: *Aug 10 19:05:21.321 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026759: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_from_addr 026760: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_sip_URI 026761: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_to_addr 026762: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_sip_URI 026763: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_sip_URI 026764: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_cseq 026765: *Aug 10 19:05:21.321 EST: CCE: sip_fetch_seq_no 026766: *Aug 10 19:05:21.321 EST: CCE: All mandatory header fields for REGISTER are present 026767: *Aug 10 19:05:21.321 EST: CCE: No forbidden header field for REGISTER is present 026768: *Aug 10 19:05:21.321 EST: CCE: SIP : SIP session state = 1 026769: *Aug 10 19:05:21.321 EST: CCE: Last class in child policy = C0000025 026770: *Aug 10 19:05:21.401 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026771: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_from_addr 026772: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_sip_URI 026773: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_to_addr 026774: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_sip_URI 026775: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_cseq 026776: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_seq_no 026777: *Aug 10 19:05:21.401 EST: CCE: sip_fetch_sip_URI 026778: *Aug 10 19:05:21.401 EST: CCE: All mandatory header fields for 100 are present 026779: *Aug 10 19:05:21.401 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026780: *Aug 10 19:05:21.401 EST: CCE: SIP : Forbidden header field present 026781: *Aug 10 19:05:21.401 EST: FIREWALL sis 845A55E0: *** protocol error found *** 026782: *Aug 10 19:05:21.405 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026783: *Aug 10 19:05:21.405 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026784: *Aug 10 19:05:21.405 EST: FIREWALL: Pregen without any dialog 026785: *Aug 10 19:05:21.405 EST: FIREWALL sis 845A55E0: Sis extension deleted 026786: *Aug 10 19:05:45.318 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026787: *Aug 10 19:05:45.318 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026788: *Aug 10 19:05:45.318 EST: CCE: sip_fetch_from_addr 026789: *Aug 10 19:05:45.318 EST: CCE: sip_fetch_sip_URI 026790: *Aug 10 19:05:45.318 EST: CCE: sip_fetch_to_addr 026791: *Aug 10 19:05:45.318 EST: CCE: sip_fetch_sip_URI 026792: *Aug 10 19:05:45.318 EST: CCE: sip_fetch_sip_URI 026793: *Aug 10 19:05:45.322 EST: CCE: sip_fetch_cseq 026794: *Aug 10 19:05:45.322 EST: CCE: sip_fetch_seq_no 026795: *Aug 10 19:05:45.322 EST: CCE: All mandatory header fields for REGISTER are present 026796: *Aug 10 19:05:45.322 EST: CCE: No forbidden header field for REGISTER is present 026797: *Aug 10 19:05:45.322 EST: CCE: SIP : SIP session state = 1 026798: *Aug 10 19:05:45.322 EST: CCE: Last class in child policy = C0000025 026799: *Aug 10 19:05:45.398 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026800: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_from_addr 026801: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_sip_URI 026802: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_to_addr 026803: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_sip_URI 026804: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_cseq 026805: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_seq_no 026806: *Aug 10 19:05:45.402 EST: CCE: sip_fetch_sip_URI 026807: *Aug 10 19:05:45.402 EST: CCE: All mandatory header fields for 100 are present 026808: *Aug 10 19:05:45.402 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026809: *Aug 10 19:05:45.402 EST: CCE: SIP : Forbidden header field present 026810: *Aug 10 19:05:45.402 EST: FIREWALL sis 8459F3E0: *** protocol error found *** 026811: *Aug 10 19:05:45.402 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026812: *Aug 10 19:05:45.402 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026813: *Aug 10 19:05:45.402 EST: FIREWALL: Pregen without any dialog 026814: *Aug 10 19:05:45.406 EST: FIREWALL sis 8459F3E0: Sis extension deleted 026815: *Aug 10 19:05:45.406 EST: %FW-6-DROP_PKT: Dropping udp session 12.238.153.251:5060 10.240.0.101:5060 with ip ident 0 026816: *Aug 10 19:05:46.318 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026817: *Aug 10 19:05:46.318 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026818: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_from_addr 026819: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_sip_URI 026820: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_to_addr 026821: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_sip_URI 026822: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_sip_URI 026823: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_cseq 026824: *Aug 10 19:05:46.318 EST: CCE: sip_fetch_seq_no 026825: *Aug 10 19:05:46.322 EST: CCE: All mandatory header fields for REGISTER are present 026826: *Aug 10 19:05:46.322 EST: CCE: No forbidden header field for REGISTER is present 026827: *Aug 10 19:05:46.322 EST: CCE: SIP : SIP session state = 1 026828: *Aug 10 19:05:46.322 EST: CCE: Last class in child policy = C0000025 026829: *Aug 10 19:05:46.398 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026830: *Aug 10 19:05:46.398 EST: CCE: sip_fetch_from_addr 026831: *Aug 10 19:05:46.398 EST: CCE: sip_fetch_sip_URI 026832: *Aug 10 19:05:46.402 EST: CCE: sip_fetch_to_addr 026833: *Aug 10 19:05:46.402 EST: CCE: sip_fetch_sip_URI 026834: *Aug 10 19:05:46.402 EST: CCE: sip_fetch_cseq 026835: *Aug 10 19:05:46.402 EST: CCE: sip_fetch_seq_no 026836: *Aug 10 19:05:46.402 EST: CCE: sip_fetch_sip_URI 026837: *Aug 10 19:05:46.402 EST: CCE: All mandatory header fields for 100 are present 026838: *Aug 10 19:05:46.402 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026839: *Aug 10 19:05:46.402 EST: CCE: SIP : Forbidden header field present 026840: *Aug 10 19:05:46.402 EST: FIREWALL sis 8459F3E0: *** protocol error found *** 026841: *Aug 10 19:05:46.402 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026842: *Aug 10 19:05:46.402 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026843: *Aug 10 19:05:46.402 EST: FIREWALL: Pregen without any dialog 026844: *Aug 10 19:05:46.402 EST: FIREWALL sis 8459F3E0: Sis extension deleted 026845: *Aug 10 19:05:48.317 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026846: *Aug 10 19:05:48.317 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026847: *Aug 10 19:05:48.317 EST: CCE: sip_fetch_from_addr 026848: *Aug 10 19:05:48.317 EST: CCE: sip_fetch_sip_URI 026849: *Aug 10 19:05:48.317 EST: CCE: sip_fetch_to_addr 026850: *Aug 10 19:05:48.317 EST: CCE: sip_fetch_sip_URI 026851: *Aug 10 19:05:48.317 EST: CCE: sip_fetch_sip_URI 026852: *Aug 10 19:05:48.321 EST: CCE: sip_fetch_cseq 026853: *Aug 10 19:05:48.321 EST: CCE: sip_fetch_seq_no 026854: *Aug 10 19:05:48.321 EST: CCE: All mandatory header fields for REGISTER are present 026855: *Aug 10 19:05:48.321 EST: CCE: No forbidden header field for REGISTER is present 026856: *Aug 10 19:05:48.321 EST: CCE: SIP : SIP session state = 1 026857: *Aug 10 19:05:48.321 EST: CCE: Last class in child policy = C0000025 026858: *Aug 10 19:05:48.397 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026859: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_from_addr 026860: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_sip_URI 026861: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_to_addr 026862: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_sip_URI 026863: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_cseq 026864: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_seq_no 026865: *Aug 10 19:05:48.401 EST: CCE: sip_fetch_sip_URI 026866: *Aug 10 19:05:48.401 EST: CCE: All mandatory header fields for 100 are present 026867: *Aug 10 19:05:48.401 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026868: *Aug 10 19:05:48.401 EST: CCE: SIP : Forbidden header field present 026869: *Aug 10 19:05:48.401 EST: FIREWALL sis 845AAFE0: *** protocol error found *** 026870: *Aug 10 19:05:48.401 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026871: *Aug 10 19:05:48.401 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026872: *Aug 10 19:05:48.401 EST: FIREWALL: Pregen without any dialog 026873: *Aug 10 19:05:48.401 EST: FIREWALL sis 845AAFE0: Sis extension deleted 026874: *Aug 10 19:05:52.316 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026875: *Aug 10 19:05:52.316 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026876: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_from_addr 026877: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_sip_URI 026878: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_to_addr 026879: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_sip_URI 026880: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_sip_URI 026881: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_cseq 026882: *Aug 10 19:05:52.320 EST: CCE: sip_fetch_seq_no 026883: *Aug 10 19:05:52.320 EST: CCE: All mandatory header fields for REGISTER are present 026884: *Aug 10 19:05:52.320 EST: CCE: No forbidden header field for REGISTER is present 026885: *Aug 10 19:05:52.320 EST: CCE: SIP : SIP session state = 1 026886: *Aug 10 19:05:52.320 EST: CCE: Last class in child policy = C0000025 026887: *Aug 10 19:05:52.400 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026888: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_from_addr 026889: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_sip_URI 026890: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_to_addr 026891: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_sip_URI 026892: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_cseq 026893: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_seq_no 026894: *Aug 10 19:05:52.400 EST: CCE: sip_fetch_sip_URI 026895: *Aug 10 19:05:52.400 EST: CCE: All mandatory header fields for 100 are present 026896: *Aug 10 19:05:52.400 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026897: *Aug 10 19:05:52.400 EST: CCE: SIP : Forbidden header field present 026898: *Aug 10 19:05:52.400 EST: FIREWALL sis 845A69E0: *** protocol error found *** 026899: *Aug 10 19:05:52.400 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026900: *Aug 10 19:05:52.400 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026901: *Aug 10 19:05:52.404 EST: FIREWALL: Pregen without any dialog 026902: *Aug 10 19:05:52.404 EST: FIREWALL sis 845A69E0: Sis extension deleted 026903: *Aug 10 19:05:56.319 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026904: *Aug 10 19:05:56.319 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026905: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_from_addr 026906: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_sip_URI 026907: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_to_addr 026908: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_sip_URI 026909: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_sip_URI 026910: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_cseq 026911: *Aug 10 19:05:56.319 EST: CCE: sip_fetch_seq_no 026912: *Aug 10 19:05:56.319 EST: CCE: All mandatory header fields for REGISTER are present 026913: *Aug 10 19:05:56.319 EST: CCE: No forbidden header field for REGISTER is present 026914: *Aug 10 19:05:56.319 EST: CCE: SIP : SIP session state = 1 026915: *Aug 10 19:05:56.319 EST: CCE: Last class in child policy = C0000025 026916: *Aug 10 19:05:56.399 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026917: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_from_addr 026918: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_sip_URI 026919: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_to_addr 026920: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_sip_URI 026921: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_cseq 026922: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_seq_no 026923: *Aug 10 19:05:56.399 EST: CCE: sip_fetch_sip_URI 026924: *Aug 10 19:05:56.399 EST: CCE: All mandatory header fields for 100 are present 026925: *Aug 10 19:05:56.399 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026926: *Aug 10 19:05:56.403 EST: CCE: SIP : Forbidden header field present 026927: *Aug 10 19:05:56.403 EST: FIREWALL sis 8459CDE0: *** protocol error found *** 026928: *Aug 10 19:05:56.403 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026929: *Aug 10 19:05:56.403 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026930: *Aug 10 19:05:56.403 EST: FIREWALL: Pregen without any dialog 026931: *Aug 10 19:05:56.403 EST: FIREWALL sis 8459CDE0: Sis extension deleted 026932: *Aug 10 19:06:02.473 EST: %FW-6-LOG_SUMMARY: 10 packets were dropped from 12.238.153.251:5060 => 10.240.0.101:5060 (target:class)-(OutsideToInside:class-default) 026933: *Aug 10 19:06:02.473 EST: %FW-6-LOG_SUMMARY: 1 packet were dropped from 77.127.5.167:35118 => 10.240.0.110:14572 (target:class)-(OutsideToInside:class-default) 026934: *Aug 10 19:06:02.473 EST: %FW-6-LOG_SUMMARY: 1 packet were dropped from 67.65.238.132:12000 => 10.240.0.110:14572 (target:class)-(OutsideToInside:class-default) 026935: *Aug 10 19:06:15.881 EST: %FW-6-DROP_PKT: Dropping udp session 216.9.146.148:14751 10.240.0.110:14572 on zone-pair OutsideToInside class class-default due to DROP action found in policy-map with ip ident 0 026936: *Aug 10 19:06:20.316 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026937: *Aug 10 19:06:20.316 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026938: *Aug 10 19:06:20.316 EST: CCE: sip_fetch_from_addr 026939: *Aug 10 19:06:20.316 EST: CCE: sip_fetch_sip_URI 026940: *Aug 10 19:06:20.316 EST: CCE: sip_fetch_to_addr 026941: *Aug 10 19:06:20.320 EST: CCE: sip_fetch_sip_URI 026942: *Aug 10 19:06:20.320 EST: CCE: sip_fetch_sip_URI 026943: *Aug 10 19:06:20.320 EST: CCE: sip_fetch_cseq 026944: *Aug 10 19:06:20.320 EST: CCE: sip_fetch_seq_no 026945: *Aug 10 19:06:20.320 EST: CCE: All mandatory header fields for REGISTER are present 026946: *Aug 10 19:06:20.320 EST: CCE: No forbidden header field for REGISTER is present 026947: *Aug 10 19:06:20.320 EST: CCE: SIP : SIP session state = 1 026948: *Aug 10 19:06:20.320 EST: CCE: Last class in child policy = C0000025 026949: *Aug 10 19:06:20.400 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026950: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_from_addr 026951: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_sip_URI 026952: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_to_addr 026953: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_sip_URI 026954: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_cseq 026955: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_seq_no 026956: *Aug 10 19:06:20.400 EST: CCE: sip_fetch_sip_URI 026957: *Aug 10 19:06:20.400 EST: CCE: All mandatory header fields for 100 are present 026958: *Aug 10 19:06:20.400 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026959: *Aug 10 19:06:20.400 EST: CCE: SIP : Forbidden header field present 026960: *Aug 10 19:06:20.400 EST: FIREWALL sis 845A1DE0: *** protocol error found *** 026961: *Aug 10 19:06:20.400 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026962: *Aug 10 19:06:20.400 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026963: *Aug 10 19:06:20.400 EST: FIREWALL: Pregen without any dialog 026964: *Aug 10 19:06:20.404 EST: FIREWALL sis 845A1DE0: Sis extension deleted 026965: *Aug 10 19:06:21.316 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026966: *Aug 10 19:06:21.316 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026967: *Aug 10 19:06:21.316 EST: CCE: sip_fetch_from_addr 026968: *Aug 10 19:06:21.316 EST: CCE: sip_fetch_sip_URI 026969: *Aug 10 19:06:21.316 EST: CCE: sip_fetch_to_addr 026970: *Aug 10 19:06:21.316 EST: CCE: sip_fetch_sip_URI 026971: *Aug 10 19:06:21.316 EST: CCE: sip_fetch_sip_URI 026972: *Aug 10 19:06:21.320 EST: CCE: sip_fetch_cseq 026973: *Aug 10 19:06:21.320 EST: CCE: sip_fetch_seq_no 026974: *Aug 10 19:06:21.320 EST: CCE: All mandatory header fields for REGISTER are present 026975: *Aug 10 19:06:21.320 EST: CCE: No forbidden header field for REGISTER is present 026976: *Aug 10 19:06:21.320 EST: CCE: SIP : SIP session state = 1 026977: *Aug 10 19:06:21.320 EST: CCE: Last class in child policy = C0000025 026978: *Aug 10 19:06:21.396 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 026979: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_from_addr 026980: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_sip_URI 026981: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_to_addr 026982: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_sip_URI 026983: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_cseq 026984: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_seq_no 026985: *Aug 10 19:06:21.400 EST: CCE: sip_fetch_sip_URI 026986: *Aug 10 19:06:21.400 EST: CCE: All mandatory header fields for 100 are present 026987: *Aug 10 19:06:21.400 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 026988: *Aug 10 19:06:21.400 EST: CCE: SIP : Forbidden header field present 026989: *Aug 10 19:06:21.400 EST: FIREWALL sis 8459E7E0: *** protocol error found *** 026990: *Aug 10 19:06:21.400 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 026991: *Aug 10 19:06:21.400 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 026992: *Aug 10 19:06:21.400 EST: FIREWALL: Pregen without any dialog 026993: *Aug 10 19:06:21.400 EST: FIREWALL sis 8459E7E0: Sis extension deleted 026994: *Aug 10 19:06:23.315 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 026995: *Aug 10 19:06:23.315 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 026996: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_from_addr 026997: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_sip_URI 026998: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_to_addr 026999: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_sip_URI 027000: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_sip_URI 027001: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_cseq 027002: *Aug 10 19:06:23.319 EST: CCE: sip_fetch_seq_no 027003: *Aug 10 19:06:23.319 EST: CCE: All mandatory header fields for REGISTER are present 027004: *Aug 10 19:06:23.319 EST: CCE: No forbidden header field for REGISTER is present 027005: *Aug 10 19:06:23.319 EST: CCE: SIP : SIP session state = 1 027006: *Aug 10 19:06:23.319 EST: CCE: Last class in child policy = C0000025 027007: *Aug 10 19:06:23.399 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027008: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_from_addr 027009: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_sip_URI 027010: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_to_addr 027011: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_sip_URI 027012: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_cseq 027013: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_seq_no 027014: *Aug 10 19:06:23.399 EST: CCE: sip_fetch_sip_URI 027015: *Aug 10 19:06:23.399 EST: CCE: All mandatory header fields for 100 are present 027016: *Aug 10 19:06:23.399 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027017: *Aug 10 19:06:23.399 EST: CCE: SIP : Forbidden header field present 027018: *Aug 10 19:06:23.399 EST: FIREWALL sis 8459F3E0: *** protocol error found *** 027019: *Aug 10 19:06:23.399 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027020: *Aug 10 19:06:23.399 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027021: *Aug 10 19:06:23.399 EST: FIREWALL: Pregen without any dialog 027022: *Aug 10 19:06:23.403 EST: FIREWALL sis 8459F3E0: Sis extension deleted 027023: *Aug 10 19:06:27.314 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027024: *Aug 10 19:06:27.318 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027025: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_from_addr 027026: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_sip_URI 027027: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_to_addr 027028: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_sip_URI 027029: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_sip_URI 027030: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_cseq 027031: *Aug 10 19:06:27.318 EST: CCE: sip_fetch_seq_no 027032: *Aug 10 19:06:27.318 EST: CCE: All mandatory header fields for REGISTER are present 027033: *Aug 10 19:06:27.318 EST: CCE: No forbidden header field for REGISTER is present 027034: *Aug 10 19:06:27.318 EST: CCE: SIP : SIP session state = 1 027035: *Aug 10 19:06:27.318 EST: CCE: Last class in child policy = C0000025 027036: *Aug 10 19:06:27.398 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027037: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_from_addr 027038: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_sip_URI 027039: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_to_addr 027040: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_sip_URI 027041: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_cseq 027042: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_seq_no 027043: *Aug 10 19:06:27.398 EST: CCE: sip_fetch_sip_URI 027044: *Aug 10 19:06:27.398 EST: CCE: All mandatory header fields for 100 are present 027045: *Aug 10 19:06:27.398 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027046: *Aug 10 19:06:27.398 EST: CCE: SIP : Forbidden header field present 027047: *Aug 10 19:06:27.398 EST: FIREWALL sis 8459F3E0: *** protocol error found *** 027048: *Aug 10 19:06:27.398 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027049: *Aug 10 19:06:27.402 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027050: *Aug 10 19:06:27.402 EST: FIREWALL: Pregen without any dialog 027051: *Aug 10 19:06:27.402 EST: FIREWALL sis 8459F3E0: Sis extension deleted 027052: *Aug 10 19:06:31.317 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027053: *Aug 10 19:06:31.317 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027054: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_from_addr 027055: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_sip_URI 027056: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_to_addr 027057: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_sip_URI 027058: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_sip_URI 027059: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_cseq 027060: *Aug 10 19:06:31.317 EST: CCE: sip_fetch_seq_no 027061: *Aug 10 19:06:31.317 EST: CCE: All mandatory header fields for REGISTER are present 027062: *Aug 10 19:06:31.317 EST: CCE: No forbidden header field for REGISTER is present 027063: *Aug 10 19:06:31.317 EST: CCE: SIP : SIP session state = 1 027064: *Aug 10 19:06:31.317 EST: CCE: Last class in child policy = C0000025 027065: *Aug 10 19:06:31.397 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027066: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_from_addr 027067: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_sip_URI 027068: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_to_addr 027069: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_sip_URI 027070: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_cseq 027071: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_seq_no 027072: *Aug 10 19:06:31.397 EST: CCE: sip_fetch_sip_URI 027073: *Aug 10 19:06:31.397 EST: CCE: All mandatory header fields for 100 are present 027074: *Aug 10 19:06:31.401 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027075: *Aug 10 19:06:31.401 EST: CCE: SIP : Forbidden header field present 027076: *Aug 10 19:06:31.401 EST: FIREWALL sis 8459F3E0: *** protocol error found *** 027077: *Aug 10 19:06:31.401 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027078: *Aug 10 19:06:31.401 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027079: *Aug 10 19:06:31.401 EST: FIREWALL: Pregen without any dialog 027080: *Aug 10 19:06:31.401 EST: FIREWALL sis 8459F3E0: Sis extension deleted 027081: *Aug 10 19:06:50.908 EST: %FW-6-DROP_PKT: Dropping udp session 95.107.177.27:32542 10.240.0.110:14572 on zone-pair OutsideToInside class class-default due to DROP action found in policy-map with ip ident 0 027082: *Aug 10 19:06:55.314 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027083: *Aug 10 19:06:55.314 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027084: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_from_addr 027085: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_sip_URI 027086: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_to_addr 027087: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_sip_URI 027088: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_sip_URI 027089: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_cseq 027090: *Aug 10 19:06:55.318 EST: CCE: sip_fetch_seq_no 027091: *Aug 10 19:06:55.318 EST: CCE: All mandatory header fields for REGISTER are present 027092: *Aug 10 19:06:55.318 EST: CCE: No forbidden header field for REGISTER is present 027093: *Aug 10 19:06:55.318 EST: CCE: SIP : SIP session state = 1 027094: *Aug 10 19:06:55.318 EST: CCE: Last class in child policy = C0000025 027095: *Aug 10 19:06:55.398 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027096: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_from_addr 027097: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_sip_URI 027098: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_to_addr 027099: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_sip_URI 027100: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_cseq 027101: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_seq_no 027102: *Aug 10 19:06:55.398 EST: CCE: sip_fetch_sip_URI 027103: *Aug 10 19:06:55.398 EST: CCE: All mandatory header fields for 100 are present 027104: *Aug 10 19:06:55.398 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027105: *Aug 10 19:06:55.398 EST: CCE: SIP : Forbidden header field present 027106: *Aug 10 19:06:55.398 EST: FIREWALL sis 845A37E0: *** protocol error found *** 027107: *Aug 10 19:06:55.398 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027108: *Aug 10 19:06:55.398 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027109: *Aug 10 19:06:55.398 EST: FIREWALL: Pregen without any dialog 027110: *Aug 10 19:06:55.402 EST: FIREWALL sis 845A37E0: Sis extension deleted 027111: *Aug 10 19:06:56.314 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027112: *Aug 10 19:06:56.314 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027113: *Aug 10 19:06:56.314 EST: CCE: sip_fetch_from_addr 027114: *Aug 10 19:06:56.314 EST: CCE: sip_fetch_sip_URI 027115: *Aug 10 19:06:56.314 EST: CCE: sip_fetch_to_addr 027116: *Aug 10 19:06:56.318 EST: CCE: sip_fetch_sip_URI 027117: *Aug 10 19:06:56.318 EST: CCE: sip_fetch_sip_URI 027118: *Aug 10 19:06:56.318 EST: CCE: sip_fetch_cseq 027119: *Aug 10 19:06:56.318 EST: CCE: sip_fetch_seq_no 027120: *Aug 10 19:06:56.318 EST: CCE: All mandatory header fields for REGISTER are present 027121: *Aug 10 19:06:56.318 EST: CCE: No forbidden header field for REGISTER is present 027122: *Aug 10 19:06:56.318 EST: CCE: SIP : SIP session state = 1 027123: *Aug 10 19:06:56.318 EST: CCE: Last class in child policy = C0000025 027124: *Aug 10 19:06:56.394 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027125: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_from_addr 027126: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_sip_URI 027127: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_to_addr 027128: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_sip_URI 027129: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_cseq 027130: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_seq_no 027131: *Aug 10 19:06:56.398 EST: CCE: sip_fetch_sip_URI 027132: *Aug 10 19:06:56.398 EST: CCE: All mandatory header fields for 100 are present 027133: *Aug 10 19:06:56.398 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027134: *Aug 10 19:06:56.398 EST: CCE: SIP : Forbidden header field present 027135: *Aug 10 19:06:56.398 EST: FIREWALL sis 845A37E0: *** protocol error found *** 027136: *Aug 10 19:06:56.398 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027137: *Aug 10 19:06:56.398 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027138: *Aug 10 19:06:56.398 EST: FIREWALL: Pregen without any dialog 027139: *Aug 10 19:06:56.398 EST: FIREWALL sis 845A37E0: Sis extension deleted 027140: *Aug 10 19:06:58.313 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027141: *Aug 10 19:06:58.313 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027142: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_from_addr 027143: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_sip_URI 027144: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_to_addr 027145: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_sip_URI 027146: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_sip_URI 027147: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_cseq 027148: *Aug 10 19:06:58.317 EST: CCE: sip_fetch_seq_no 027149: *Aug 10 19:06:58.317 EST: CCE: All mandatory header fields for REGISTER are present 027150: *Aug 10 19:06:58.317 EST: CCE: No forbidden header field for REGISTER is present 027151: *Aug 10 19:06:58.317 EST: CCE: SIP : SIP session state = 1 027152: *Aug 10 19:06:58.317 EST: CCE: Last class in child policy = C0000025 027153: *Aug 10 19:06:58.397 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027154: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_from_addr 027155: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_sip_URI 027156: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_to_addr 027157: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_sip_URI 027158: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_cseq 027159: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_seq_no 027160: *Aug 10 19:06:58.397 EST: CCE: sip_fetch_sip_URI 027161: *Aug 10 19:06:58.397 EST: CCE: All mandatory header fields for 100 are present 027162: *Aug 10 19:06:58.397 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027163: *Aug 10 19:06:58.397 EST: CCE: SIP : Forbidden header field present 027164: *Aug 10 19:06:58.397 EST: FIREWALL sis 8459C7E0: *** protocol error found *** 027165: *Aug 10 19:06:58.401 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027166: *Aug 10 19:06:58.401 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027167: *Aug 10 19:06:58.401 EST: FIREWALL: Pregen without any dialog 027168: *Aug 10 19:06:58.401 EST: FIREWALL sis 8459C7E0: Sis extension deleted 027169: *Aug 10 19:07:02.316 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027170: *Aug 10 19:07:02.316 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027171: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_from_addr 027172: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_sip_URI 027173: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_to_addr 027174: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_sip_URI 027175: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_sip_URI 027176: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_cseq 027177: *Aug 10 19:07:02.316 EST: CCE: sip_fetch_seq_no 027178: *Aug 10 19:07:02.316 EST: CCE: All mandatory header fields for REGISTER are present 027179: *Aug 10 19:07:02.316 EST: CCE: No forbidden header field for REGISTER is present 027180: *Aug 10 19:07:02.316 EST: CCE: SIP : SIP session state = 1 027181: *Aug 10 19:07:02.316 EST: CCE: Last class in child policy = C0000025 027182: *Aug 10 19:07:02.396 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027183: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_from_addr 027184: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_sip_URI 027185: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_to_addr 027186: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_sip_URI 027187: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_cseq 027188: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_seq_no 027189: *Aug 10 19:07:02.396 EST: CCE: sip_fetch_sip_URI 027190: *Aug 10 19:07:02.396 EST: CCE: All mandatory header fields for 100 are present 027191: *Aug 10 19:07:02.396 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027192: *Aug 10 19:07:02.396 EST: CCE: SIP : Forbidden header field present 027193: *Aug 10 19:07:02.400 EST: FIREWALL sis 8459CBE0: *** protocol error found *** 027194: *Aug 10 19:07:02.400 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027195: *Aug 10 19:07:02.400 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027196: *Aug 10 19:07:02.400 EST: FIREWALL: Pregen without any dialog 027197: *Aug 10 19:07:02.400 EST: FIREWALL sis 8459CBE0: Sis extension deleted 027198: *Aug 10 19:07:02.456 EST: %FW-6-LOG_SUMMARY: 1 packet were dropped from 216.9.146.148:14751 => 10.240.0.110:14572 (target:class)-(OutsideToInside:class-default) 027199: *Aug 10 19:07:02.456 EST: %FW-6-LOG_SUMMARY: 9 packets were dropped from 12.238.153.251:5060 => 10.240.0.101:5060 (target:class)-(OutsideToInside:class-default) 027200: *Aug 10 19:07:02.456 EST: %FW-6-LOG_SUMMARY: 1 packet were dropped from 86.215.72.32:24557 => 10.240.0.110:14572 (target:class)-(OutsideToInside:class-default) 027201: *Aug 10 19:07:02.456 EST: %FW-6-LOG_SUMMARY: 2 packets were dropped from 95.107.177.27:32542 => 10.240.0.110:14572 (target:class)-(OutsideToInside:class-default) 027202: *Aug 10 19:07:06.315 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027203: *Aug 10 19:07:06.315 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027204: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_from_addr 027205: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_sip_URI 027206: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_to_addr 027207: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_sip_URI 027208: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_sip_URI 027209: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_cseq 027210: *Aug 10 19:07:06.315 EST: CCE: sip_fetch_seq_no 027211: *Aug 10 19:07:06.315 EST: CCE: All mandatory header fields for REGISTER are present 027212: *Aug 10 19:07:06.315 EST: CCE: No forbidden header field for REGISTER is present 027213: *Aug 10 19:07:06.315 EST: CCE: SIP : SIP session state = 1 027214: *Aug 10 19:07:06.315 EST: CCE: Last class in child policy = C0000025 027215: *Aug 10 19:07:06.395 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027216: *Aug 10 19:07:06.395 EST: CCE: sip_fetch_from_addr 027217: *Aug 10 19:07:06.395 EST: CCE: sip_fetch_sip_URI 027218: *Aug 10 19:07:06.395 EST: CCE: sip_fetch_to_addr 027219: *Aug 10 19:07:06.395 EST: CCE: sip_fetch_sip_URI 027220: *Aug 10 19:07:06.395 EST: CCE: sip_fetch_cseq 027221: *Aug 10 19:07:06.395 EST: CCE: sip_fetch_seq_no 027222: *Aug 10 19:07:06.399 EST: CCE: sip_fetch_sip_URI 027223: *Aug 10 19:07:06.399 EST: CCE: All mandatory header fields for 100 are present 027224: *Aug 10 19:07:06.399 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027225: *Aug 10 19:07:06.399 EST: CCE: SIP : Forbidden header field present 027226: *Aug 10 19:07:06.399 EST: FIREWALL sis 8459B9E0: *** protocol error found *** 027227: *Aug 10 19:07:06.399 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027228: *Aug 10 19:07:06.399 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027229: *Aug 10 19:07:06.399 EST: FIREWALL: Pregen without any dialog 027230: *Aug 10 19:07:06.399 EST: FIREWALL sis 8459B9E0: Sis extension deleted 027231: *Aug 10 19:07:24.950 EST: %FW-6-DROP_PKT: Dropping tcp session 208.70.245.94:110 10.240.0.110:4168 due to Out-Of-Order Segment with ip ident 0 027232: *Aug 10 19:07:30.312 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027233: *Aug 10 19:07:30.316 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027234: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_from_addr 027235: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_sip_URI 027236: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_to_addr 027237: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_sip_URI 027238: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_sip_URI 027239: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_cseq 027240: *Aug 10 19:07:30.316 EST: CCE: sip_fetch_seq_no 027241: *Aug 10 19:07:30.316 EST: CCE: All mandatory header fields for REGISTER are present 027242: *Aug 10 19:07:30.316 EST: CCE: No forbidden header field for REGISTER is present 027243: *Aug 10 19:07:30.316 EST: CCE: SIP : SIP session state = 1 027244: *Aug 10 19:07:30.316 EST: CCE: Last class in child policy = C0000025 027245: *Aug 10 19:07:30.396 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027246: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_from_addr 027247: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_sip_URI 027248: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_to_addr 027249: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_sip_URI 027250: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_cseq 027251: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_seq_no 027252: *Aug 10 19:07:30.396 EST: CCE: sip_fetch_sip_URI 027253: *Aug 10 19:07:30.396 EST: CCE: All mandatory header fields for 100 are present 027254: *Aug 10 19:07:30.396 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027255: *Aug 10 19:07:30.396 EST: CCE: SIP : Forbidden header field present 027256: *Aug 10 19:07:30.396 EST: FIREWALL sis 845A4BE0: *** protocol error found *** 027257: *Aug 10 19:07:30.396 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027258: *Aug 10 19:07:30.400 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027259: *Aug 10 19:07:30.400 EST: FIREWALL: Pregen without any dialog 027260: *Aug 10 19:07:30.400 EST: FIREWALL sis 845A4BE0: Sis extension deleted 027261: *Aug 10 19:07:31.312 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027262: *Aug 10 19:07:31.312 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027263: *Aug 10 19:07:31.312 EST: CCE: sip_fetch_from_addr 027264: *Aug 10 19:07:31.316 EST: CCE: sip_fetch_sip_URI 027265: *Aug 10 19:07:31.316 EST: CCE: sip_fetch_to_addr 027266: *Aug 10 19:07:31.316 EST: CCE: sip_fetch_sip_URI 027267: *Aug 10 19:07:31.316 EST: CCE: sip_fetch_sip_URI 027268: *Aug 10 19:07:31.316 EST: CCE: sip_fetch_cseq 027269: *Aug 10 19:07:31.316 EST: CCE: sip_fetch_seq_no 027270: *Aug 10 19:07:31.316 EST: CCE: All mandatory header fields for REGISTER are present 027271: *Aug 10 19:07:31.316 EST: CCE: No forbidden header field for REGISTER is present 027272: *Aug 10 19:07:31.316 EST: CCE: SIP : SIP session state = 1 027273: *Aug 10 19:07:31.316 EST: CCE: Last class in child policy = C0000025 027274: *Aug 10 19:07:31.396 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027275: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_from_addr 027276: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_sip_URI 027277: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_to_addr 027278: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_sip_URI 027279: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_cseq 027280: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_seq_no 027281: *Aug 10 19:07:31.396 EST: CCE: sip_fetch_sip_URI 027282: *Aug 10 19:07:31.396 EST: CCE: All mandatory header fields for 100 are present 027283: *Aug 10 19:07:31.396 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027284: *Aug 10 19:07:31.396 EST: CCE: SIP : Forbidden header field present 027285: *Aug 10 19:07:31.396 EST: FIREWALL sis 8459CDE0: *** protocol error found *** 027286: *Aug 10 19:07:31.396 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027287: *Aug 10 19:07:31.396 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027288: *Aug 10 19:07:31.396 EST: FIREWALL: Pregen without any dialog 027289: *Aug 10 19:07:31.400 EST: FIREWALL sis 8459CDE0: Sis extension deleted 027290: *Aug 10 19:07:33.312 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027291: *Aug 10 19:07:33.316 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027292: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_from_addr 027293: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_sip_URI 027294: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_to_addr 027295: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_sip_URI 027296: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_sip_URI 027297: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_cseq 027298: *Aug 10 19:07:33.316 EST: CCE: sip_fetch_seq_no 027299: *Aug 10 19:07:33.316 EST: CCE: All mandatory header fields for REGISTER are present 027300: *Aug 10 19:07:33.316 EST: CCE: No forbidden header field for REGISTER is present 027301: *Aug 10 19:07:33.316 EST: CCE: SIP : SIP session state = 1 027302: *Aug 10 19:07:33.316 EST: CCE: Last class in child policy = C0000025 027303: *Aug 10 19:07:33.396 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027304: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_from_addr 027305: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_sip_URI 027306: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_to_addr 027307: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_sip_URI 027308: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_cseq 027309: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_seq_no 027310: *Aug 10 19:07:33.396 EST: CCE: sip_fetch_sip_URI 027311: *Aug 10 19:07:33.396 EST: CCE: All mandatory header fields for 100 are present 027312: *Aug 10 19:07:33.396 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027313: *Aug 10 19:07:33.396 EST: CCE: SIP : Forbidden header field present 027314: *Aug 10 19:07:33.396 EST: FIREWALL sis 845A4BE0: *** protocol error found *** 027315: *Aug 10 19:07:33.396 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027316: *Aug 10 19:07:33.400 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027317: *Aug 10 19:07:33.400 EST: FIREWALL: Pregen without any dialog 027318: *Aug 10 19:07:33.400 EST: FIREWALL sis 845A4BE0: Sis extension deleted 027319: *Aug 10 19:07:37.314 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027320: *Aug 10 19:07:37.314 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027321: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_from_addr 027322: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_sip_URI 027323: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_to_addr 027324: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_sip_URI 027325: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_sip_URI 027326: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_cseq 027327: *Aug 10 19:07:37.314 EST: CCE: sip_fetch_seq_no 027328: *Aug 10 19:07:37.314 EST: CCE: All mandatory header fields for REGISTER are present 027329: *Aug 10 19:07:37.314 EST: CCE: No forbidden header field for REGISTER is present 027330: *Aug 10 19:07:37.314 EST: CCE: SIP : SIP session state = 1 027331: *Aug 10 19:07:37.314 EST: CCE: Last class in child policy = C0000025 027332: *Aug 10 19:07:37.394 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027333: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_from_addr 027334: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_sip_URI 027335: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_to_addr 027336: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_sip_URI 027337: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_cseq 027338: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_seq_no 027339: *Aug 10 19:07:37.394 EST: CCE: sip_fetch_sip_URI 027340: *Aug 10 19:07:37.394 EST: CCE: All mandatory header fields for 100 are present 027341: *Aug 10 19:07:37.398 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027342: *Aug 10 19:07:37.398 EST: CCE: SIP : Forbidden header field present 027343: *Aug 10 19:07:37.398 EST: FIREWALL sis 845A61E0: *** protocol error found *** 027344: *Aug 10 19:07:37.398 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027345: *Aug 10 19:07:37.398 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027346: *Aug 10 19:07:37.398 EST: FIREWALL: Pregen without any dialog 027347: *Aug 10 19:07:37.398 EST: FIREWALL sis 845A61E0: Sis extension deleted 027348: *Aug 10 19:07:41.313 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027349: *Aug 10 19:07:41.313 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027350: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_from_addr 027351: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_sip_URI 027352: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_to_addr 027353: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_sip_URI 027354: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_sip_URI 027355: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_cseq 027356: *Aug 10 19:07:41.313 EST: CCE: sip_fetch_seq_no 027357: *Aug 10 19:07:41.313 EST: CCE: All mandatory header fields for REGISTER are present 027358: *Aug 10 19:07:41.313 EST: CCE: No forbidden header field for REGISTER is present 027359: *Aug 10 19:07:41.317 EST: CCE: SIP : SIP session state = 1 027360: *Aug 10 19:07:41.317 EST: CCE: Last class in child policy = C0000025 027361: *Aug 10 19:07:41.393 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027362: *Aug 10 19:07:41.393 EST: CCE: sip_fetch_from_addr 027363: *Aug 10 19:07:41.393 EST: CCE: sip_fetch_sip_URI 027364: *Aug 10 19:07:41.397 EST: CCE: sip_fetch_to_addr 027365: *Aug 10 19:07:41.397 EST: CCE: sip_fetch_sip_URI 027366: *Aug 10 19:07:41.397 EST: CCE: sip_fetch_cseq 027367: *Aug 10 19:07:41.397 EST: CCE: sip_fetch_seq_no 027368: *Aug 10 19:07:41.397 EST: CCE: sip_fetch_sip_URI 027369: *Aug 10 19:07:41.397 EST: CCE: All mandatory header fields for 100 are present 027370: *Aug 10 19:07:41.397 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027371: *Aug 10 19:07:41.397 EST: CCE: SIP : Forbidden header field present 027372: *Aug 10 19:07:41.397 EST: FIREWALL sis 845A4BE0: *** protocol error found *** 027373: *Aug 10 19:07:41.397 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027374: *Aug 10 19:07:41.397 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027375: *Aug 10 19:07:41.397 EST: FIREWALL: Pregen without any dialog 027376: *Aug 10 19:07:41.397 EST: FIREWALL sis 845A4BE0: Sis extension deleted 027377: *Aug 10 19:07:58.441 EST: %FW-6-DROP_PKT: Dropping udp session 166.104.203.131:62211 10.240.0.110:14572 on zone-pair OutsideToInside class class-default due to DROP action found in policy-map with ip ident 0 027378: *Aug 10 19:08:02.439 EST: %FW-6-LOG_SUMMARY: 6 packets were dropped from 12.238.153.251:5060 => 10.240.0.101:5060 (target:class)-(OutsideToInside:class-default) 027379: *Aug 10 19:08:02.439 EST: %FW-6-LOG_SUMMARY: 9 packets were dropped from 166.104.203.131:62211 => 10.240.0.110:14572 (target:class)-(OutsideToInside:class-default) 027380: *Aug 10 19:08:05.311 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027381: *Aug 10 19:08:05.315 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027382: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_from_addr 027383: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_sip_URI 027384: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_to_addr 027385: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_sip_URI 027386: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_sip_URI 027387: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_cseq 027388: *Aug 10 19:08:05.315 EST: CCE: sip_fetch_seq_no 027389: *Aug 10 19:08:05.315 EST: CCE: All mandatory header fields for REGISTER are present 027390: *Aug 10 19:08:05.315 EST: CCE: No forbidden header field for REGISTER is present 027391: *Aug 10 19:08:05.315 EST: CCE: SIP : SIP session state = 1 027392: *Aug 10 19:08:05.315 EST: CCE: Last class in child policy = C0000025 027393: *Aug 10 19:08:05.395 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027394: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_from_addr 027395: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_sip_URI 027396: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_to_addr 027397: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_sip_URI 027398: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_cseq 027399: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_seq_no 027400: *Aug 10 19:08:05.395 EST: CCE: sip_fetch_sip_URI 027401: *Aug 10 19:08:05.395 EST: CCE: All mandatory header fields for 100 are present 027402: *Aug 10 19:08:05.395 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027403: *Aug 10 19:08:05.395 EST: CCE: SIP : Forbidden header field present 027404: *Aug 10 19:08:05.395 EST: FIREWALL sis 845A73E0: *** protocol error found *** 027405: *Aug 10 19:08:05.399 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027406: *Aug 10 19:08:05.399 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027407: *Aug 10 19:08:05.399 EST: FIREWALL: Pregen without any dialog 027408: *Aug 10 19:08:05.399 EST: FIREWALL sis 845A73E0: Sis extension deleted 027409: *Aug 10 19:08:06.310 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027410: *Aug 10 19:08:06.310 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027411: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_from_addr 027412: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_sip_URI 027413: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_to_addr 027414: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_sip_URI 027415: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_sip_URI 027416: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_cseq 027417: *Aug 10 19:08:06.314 EST: CCE: sip_fetch_seq_no 027418: *Aug 10 19:08:06.314 EST: CCE: All mandatory header fields for REGISTER are present 027419: *Aug 10 19:08:06.314 EST: CCE: No forbidden header field for REGISTER is present 027420: *Aug 10 19:08:06.314 EST: CCE: SIP : SIP session state = 1 027421: *Aug 10 19:08:06.314 EST: CCE: Last class in child policy = C0000025 027422: *Aug 10 19:08:06.394 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027423: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_from_addr 027424: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_sip_URI 027425: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_to_addr 027426: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_sip_URI 027427: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_cseq 027428: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_seq_no 027429: *Aug 10 19:08:06.394 EST: CCE: sip_fetch_sip_URI 027430: *Aug 10 19:08:06.394 EST: CCE: All mandatory header fields for 100 are present 027431: *Aug 10 19:08:06.398 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027432: *Aug 10 19:08:06.398 EST: CCE: SIP : Forbidden header field present 027433: *Aug 10 19:08:06.398 EST: FIREWALL sis 845AA9E0: *** protocol error found *** 027434: *Aug 10 19:08:06.398 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027435: *Aug 10 19:08:06.398 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027436: *Aug 10 19:08:06.398 EST: FIREWALL: Pregen without any dialog 027437: *Aug 10 19:08:06.398 EST: FIREWALL sis 845AA9E0: Sis extension deleted 027438: *Aug 10 19:08:08.314 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027439: *Aug 10 19:08:08.314 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027440: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_from_addr 027441: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_sip_URI 027442: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_to_addr 027443: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_sip_URI 027444: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_sip_URI 027445: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_cseq 027446: *Aug 10 19:08:08.314 EST: CCE: sip_fetch_seq_no 027447: *Aug 10 19:08:08.314 EST: CCE: All mandatory header fields for REGISTER are present 027448: *Aug 10 19:08:08.314 EST: CCE: No forbidden header field for REGISTER is present 027449: *Aug 10 19:08:08.314 EST: CCE: SIP : SIP session state = 1 027450: *Aug 10 19:08:08.314 EST: CCE: Last class in child policy = C0000025 027451: *Aug 10 19:08:08.394 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027452: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_from_addr 027453: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_sip_URI 027454: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_to_addr 027455: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_sip_URI 027456: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_cseq 027457: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_seq_no 027458: *Aug 10 19:08:08.394 EST: CCE: sip_fetch_sip_URI 027459: *Aug 10 19:08:08.394 EST: CCE: All mandatory header fields for 100 are present 027460: *Aug 10 19:08:08.394 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027461: *Aug 10 19:08:08.394 EST: CCE: SIP : Forbidden header field present 027462: *Aug 10 19:08:08.398 EST: FIREWALL sis 8459CDE0: *** protocol error found *** 027463: *Aug 10 19:08:08.398 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027464: *Aug 10 19:08:08.398 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027465: *Aug 10 19:08:08.398 EST: FIREWALL: Pregen without any dialog 027466: *Aug 10 19:08:08.398 EST: FIREWALL sis 8459CDE0: Sis extension deleted 027467: *Aug 10 19:08:12.313 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027468: *Aug 10 19:08:12.313 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027469: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_from_addr 027470: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_sip_URI 027471: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_to_addr 027472: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_sip_URI 027473: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_sip_URI 027474: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_cseq 027475: *Aug 10 19:08:12.313 EST: CCE: sip_fetch_seq_no 027476: *Aug 10 19:08:12.313 EST: CCE: All mandatory header fields for REGISTER are present 027477: *Aug 10 19:08:12.313 EST: CCE: No forbidden header field for REGISTER is present 027478: *Aug 10 19:08:12.317 EST: CCE: SIP : SIP session state = 1 027479: *Aug 10 19:08:12.317 EST: CCE: Last class in child policy = C0000025 027480: *Aug 10 19:08:12.393 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027481: *Aug 10 19:08:12.393 EST: CCE: sip_fetch_from_addr 027482: *Aug 10 19:08:12.393 EST: CCE: sip_fetch_sip_URI 027483: *Aug 10 19:08:12.393 EST: CCE: sip_fetch_to_addr 027484: *Aug 10 19:08:12.393 EST: CCE: sip_fetch_sip_URI 027485: *Aug 10 19:08:12.393 EST: CCE: sip_fetch_cseq 027486: *Aug 10 19:08:12.397 EST: CCE: sip_fetch_seq_no 027487: *Aug 10 19:08:12.397 EST: CCE: sip_fetch_sip_URI 027488: *Aug 10 19:08:12.397 EST: CCE: All mandatory header fields for 100 are present 027489: *Aug 10 19:08:12.397 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027490: *Aug 10 19:08:12.397 EST: CCE: SIP : Forbidden header field present 027491: *Aug 10 19:08:12.397 EST: FIREWALL sis 8459F3E0: *** protocol error found *** 027492: *Aug 10 19:08:12.397 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027493: *Aug 10 19:08:12.397 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027494: *Aug 10 19:08:12.397 EST: FIREWALL: Pregen without any dialog 027495: *Aug 10 19:08:12.397 EST: FIREWALL sis 8459F3E0: Sis extension deleted 027496: *Aug 10 19:08:16.312 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.101:5060) -- responder (12.238.153.251:5060) 027497: *Aug 10 19:08:16.312 EST: CCE: I2R = 1, source = 10.240.0.101:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 589 027498: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_from_addr 027499: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_sip_URI 027500: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_to_addr 027501: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_sip_URI 027502: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_sip_URI 027503: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_cseq 027504: *Aug 10 19:08:16.312 EST: CCE: sip_fetch_seq_no 027505: *Aug 10 19:08:16.316 EST: CCE: All mandatory header fields for REGISTER are present 027506: *Aug 10 19:08:16.316 EST: CCE: No forbidden header field for REGISTER is present 027507: *Aug 10 19:08:16.316 EST: CCE: SIP : SIP session state = 1 027508: *Aug 10 19:08:16.316 EST: CCE: Last class in child policy = C0000025 027509: *Aug 10 19:08:16.391 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.101:1024, state_object = 0x850D417C, data_len = 439 027510: *Aug 10 19:08:16.391 EST: CCE: sip_fetch_from_addr 027511: *Aug 10 19:08:16.391 EST: CCE: sip_fetch_sip_URI 027512: *Aug 10 19:08:16.395 EST: CCE: sip_fetch_to_addr 027513: *Aug 10 19:08:16.395 EST: CCE: sip_fetch_sip_URI 027514: *Aug 10 19:08:16.395 EST: CCE: sip_fetch_cseq 027515: *Aug 10 19:08:16.395 EST: CCE: sip_fetch_seq_no 027516: *Aug 10 19:08:16.395 EST: CCE: sip_fetch_sip_URI 027517: *Aug 10 19:08:16.395 EST: CCE: All mandatory header fields for 100 are present 027518: *Aug 10 19:08:16.395 EST: CCE: At least one forbidden header field for 100 is present. forbidden: 40000200, headers_found: 3500008A290 index: 9 027519: *Aug 10 19:08:16.395 EST: CCE: SIP : Forbidden header field present 027520: *Aug 10 19:08:16.395 EST: FIREWALL sis 8459E7E0: *** protocol error found *** 027521: *Aug 10 19:08:16.395 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Forbidden header field found) - dropping udp session 12.238.153.251:5060 10.240.0.101:5060 on zone-pair InsideToOutside class sip_class 027522: *Aug 10 19:08:16.395 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.101:5060) sent 589 bytes -- responder (12.238.153.251:5060) sent 0 bytes 027523: *Aug 10 19:08:16.395 EST: FIREWALL: Pregen without any dialog 027524: *Aug 10 19:08:16.395 EST: FIREWALL sis 8459E7E0: Sis extension deleted