*taken during phone initialization 000084: *Aug 12 20:23:34.454 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.75:5060) -- responder (12.238.153.251:5060) 000085: *Aug 12 20:23:34.454 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 588 000086: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_from_addr 000087: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_sip_URI 000088: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_to_addr 000089: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_sip_URI 000090: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_sip_URI 000091: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_cseq 000092: *Aug 12 20:23:34.454 EST: CCE: sip_fetch_seq_no 000093: *Aug 12 20:23:34.454 EST: CCE: SIP : SIP session state = 1 000094: *Aug 12 20:23:34.454 EST: CCE: Last class in child policy = C0000022 000095: *Aug 12 20:23:34.534 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 436 000096: *Aug 12 20:23:34.534 EST: CCE: sip_fetch_from_addr 000097: *Aug 12 20:23:34.534 EST: CCE: sip_fetch_sip_URI 000098: *Aug 12 20:23:34.534 EST: CCE: sip_fetch_to_addr 000099: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_sip_URI 000100: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_cseq 000101: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_seq_no 000102: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_sip_URI 000103: *Aug 12 20:23:34.538 EST: CCE: SIP : SIP session state = 1 000104: *Aug 12 20:23:34.538 EST: CCE: Last class in child policy = C0000022 000105: *Aug 12 20:23:34.538 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 497 000106: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_from_addr 000107: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_sip_URI 000108: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_to_addr 000109: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_sip_URI 000110: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_cseq 000111: *Aug 12 20:23:34.538 EST: CCE: sip_fetch_seq_no 000112: *Aug 12 20:23:34.542 EST: CCE: SIP : SIP session state = 2 000113: *Aug 12 20:23:34.542 EST: CCE: Last class in child policy = C0000022 000114: *Aug 12 20:23:34.542 EST: FIREWALL: Pregen without any dialog 000115: *Aug 12 20:23:34.582 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 749 000116: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_from_addr 000117: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_sip_URI 000118: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_to_addr 000119: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_sip_URI 000120: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_sip_URI 000121: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_cseq 000122: *Aug 12 20:23:34.582 EST: CCE: sip_fetch_seq_no 000123: *Aug 12 20:23:34.582 EST: CCE: SIP : SIP session state = 1 000124: *Aug 12 20:23:34.582 EST: CCE: Last class in child policy = C0000022 000125: *Aug 12 20:23:34.666 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 436 000126: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_from_addr 000127: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_sip_URI 000128: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_to_addr 000129: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_sip_URI 000130: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_cseq 000131: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_seq_no 000132: *Aug 12 20:23:34.666 EST: CCE: sip_fetch_sip_URI 000133: *Aug 12 20:23:34.666 EST: CCE: SIP : SIP session state = 1 000134: *Aug 12 20:23:34.666 EST: CCE: Last class in child policy = C0000022 000135: *Aug 12 20:23:34.678 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 538 000136: *Aug 12 20:23:34.678 EST: CCE: sip_fetch_from_addr 000137: *Aug 12 20:23:34.678 EST: CCE: sip_fetch_sip_URI 000138: *Aug 12 20:23:34.678 EST: CCE: sip_fetch_to_addr 000139: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_sip_URI 000140: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_sip_URI 000141: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_cseq 000142: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_seq_no 000143: *Aug 12 20:23:34.682 EST: CCE: SIP : SIP session state = 1 000144: *Aug 12 20:23:34.682 EST: CCE: Last class in child policy = C0000022 000145: *Aug 12 20:23:34.682 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 528 000146: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_from_addr 000147: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_sip_URI 000148: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_to_addr 000149: *Aug 12 20:23:34.682 EST: CCE: sip_fetch_sip_URI 000150: *Aug 12 20:23:34.686 EST: CCE: sip_fetch_cseq 000151: *Aug 12 20:23:34.686 EST: CCE: sip_fetch_seq_no 000152: *Aug 12 20:23:34.686 EST: CCE: sip_fetch_sip_URI 000153: *Aug 12 20:23:34.686 EST: CCE: SIP : SIP session state = 2 000154: *Aug 12 20:23:34.686 EST: CCE: Last class in child policy = C0000022 000155: *Aug 12 20:23:34.710 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 521 000156: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_from_addr 000157: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_sip_URI 000158: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_to_addr 000159: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_sip_URI 000160: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_cseq 000161: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_seq_no 000162: *Aug 12 20:23:34.710 EST: CCE: sip_fetch_sip_URI 000163: *Aug 12 20:23:34.710 EST: CCE: Last class in child policy = C0000022 000164: *Aug 12 20:23:34.742 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 773 000165: *Aug 12 20:23:34.742 EST: CCE: SIP: Err: Non-SIP message received 000166: *Aug 12 20:23:34.746 EST: FIREWALL sis 8476D720: *** protocol error found *** 000167: *Aug 12 20:23:34.746 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Content length invalid / Non-SIP MSG recvd) - dropping udp session 10.240.0.75:5060 12.238.153.251:5060 on zone-pair InsideToOutside class sip_class 000168: *Aug 12 20:23:34.746 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.75:5060) sent 1858 bytes -- responder (12.238.153.251:5060) sent 2435 bytes 000169: *Aug 12 20:23:34.746 EST: FIREWALL: Pregen without any dialog 000170: *Aug 12 20:23:34.746 EST: FIREWALL sis 8476D720: Sis extension deleted 000171: *Aug 12 20:23:34.746 EST: %FW-6-DROP_PKT: Dropping udp session 10.240.0.75:5060 12.238.153.251:5060 with ip ident 0 000172: *Aug 12 20:23:35.734 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.75:5060) -- responder (12.238.153.251:5060) 000173: *Aug 12 20:23:35.734 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 773 000174: *Aug 12 20:23:35.734 EST: CCE: SIP: Err: Non-SIP message received 000175: *Aug 12 20:23:35.734 EST: FIREWALL sis 8476DD20: *** protocol error found *** 000176: *Aug 12 20:23:35.734 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Content length invalid / Non-SIP MSG recvd) - dropping udp session 10.240.0.75:5060 12.238.153.251:5060 on zone-pair InsideToOutside class sip_class 000177: *Aug 12 20:23:35.734 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.75:5060) sent 0 bytes -- responder (12.238.153.251:5060) sent 0 bytes 000178: *Aug 12 20:23:35.734 EST: FIREWALL sis 8476DD20: Sis extension deleted 000179: Aug 12 20:23:37.733 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.75:5060) -- responder (12.238.153.251:5060) 000180: Aug 12 20:23:37.733 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 773 000181: Aug 12 20:23:37.733 EST: CCE: SIP: Err: Non-SIP message received 000182: Aug 12 20:23:37.733 EST: FIREWALL sis 8476DF20: *** protocol error found *** 000183: Aug 12 20:23:37.733 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Content length invalid / Non-SIP MSG recvd) - dropping udp session 10.240.0.75:5060 12.238.153.251:5060 on zone-pair InsideToOutside class sip_class 000184: Aug 12 20:23:37.733 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.75:5060) sent 0 bytes -- responder (12.238.153.251:5060) sent 0 bytes 000185: Aug 12 20:23:37.733 EST: FIREWALL sis 8476DF20: Sis extension deleted 000186: Aug 12 20:23:41.732 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.75:5060) -- responder (12.238.153.251:5060) 000187: Aug 12 20:23:41.732 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 773 000188: Aug 12 20:23:41.732 EST: CCE: SIP: Err: Non-SIP message received 000189: Aug 12 20:23:41.732 EST: FIREWALL sis 8476E120: *** protocol error found *** 000190: Aug 12 20:23:41.736 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Content length invalid / Non-SIP MSG recvd) - dropping udp session 10.240.0.75:5060 12.238.153.251:5060 on zone-pair InsideToOutside class sip_class 000191: Aug 12 20:23:41.736 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.75:5060) sent 0 bytes -- responder (12.238.153.251:5060) sent 0 bytes 000192: Aug 12 20:23:41.736 EST: FIREWALL sis 8476E120: Sis extension deleted 000193: Aug 12 20:23:42.648 EST: %FW-6-LOG_SUMMARY: 6 packets were dropped from 12.238.153.251:5060 => 10.240.0.75:5060 (target:class)-(OutsideToInside:class-default) 000194: Aug 12 20:23:45.731 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.75:5060) -- responder (12.238.153.251:5060) 000195: Aug 12 20:23:45.735 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 773 000196: Aug 12 20:23:45.735 EST: CCE: SIP: Err: Non-SIP message received 000197: Aug 12 20:23:45.735 EST: FIREWALL sis 8476E920: *** protocol error found *** 000198: Aug 12 20:23:45.735 EST: %AIC-4-SIP_PROTOCOL_VIOLATION: SIP protocol violation (Content length invalid / Non-SIP MSG recvd) - dropping udp session 10.240.0.75:5060 12.238.153.251:5060 on zone-pair InsideToOutside class sip_class 000199: Aug 12 20:23:45.735 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.75:5060) sent 0 bytes -- responder (12.238.153.251:5060) sent 0 bytes 000200: Aug 12 20:23:45.735 EST: FIREWALL sis 8476E920: Sis extension deleted *taken during phone call 000218: Aug 12 20:26:56.773 EST: %FW-6-DROP_PKT: Dropping sip session 12.238.153.251:5060 10.240.0.75:5060 on zone-pair OutsideToInside class class-default due to DROP action found in policy-map with ip ident 0 000219: Aug 12 20:27:11.805 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip session: initiator (10.240.0.75:5060) -- responder (12.238.153.251:5060) 000220: Aug 12 20:27:11.809 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x0, data_len = 967 000221: Aug 12 20:27:11.809 EST: CCE: sip_fetch_from_addr 000222: Aug 12 20:27:11.809 EST: CCE: sip_fetch_sip_URI 000223: Aug 12 20:27:11.809 EST: CCE: sip_fetch_to_addr 000224: Aug 12 20:27:11.809 EST: CCE: sip_fetch_sip_URI 000225: Aug 12 20:27:11.809 EST: CCE: sip_fetch_sip_URI 000226: Aug 12 20:27:11.809 EST: CCE: sip_fetch_cseq 000227: Aug 12 20:27:11.809 EST: CCE: sip_fetch_seq_no 000228: Aug 12 20:27:11.809 EST: CCE: SIP: SDP Parser: Addr mismatch, num_ports: 0 media.addr: 63.104.240.97 000229: Aug 12 20:27:11.809 EST: CCE: SIP : SIP session state = 1 000230: Aug 12 20:27:11.809 EST: CCE: Last class in child policy = C0000022 000231: Aug 12 20:27:11.893 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 520 000232: Aug 12 20:27:11.897 EST: CCE: sip_fetch_from_addr 000233: Aug 12 20:27:11.897 EST: CCE: sip_fetch_sip_URI 000234: Aug 12 20:27:11.897 EST: CCE: sip_fetch_to_addr 000235: Aug 12 20:27:11.897 EST: CCE: sip_fetch_sip_URI 000236: Aug 12 20:27:11.897 EST: CCE: sip_fetch_cseq 000237: Aug 12 20:27:11.897 EST: CCE: sip_fetch_seq_no 000238: Aug 12 20:27:11.897 EST: CCE: SIP : SIP session state = 1 000239: Aug 12 20:27:11.897 EST: CCE: Last class in child policy = C0000022 000240: Aug 12 20:27:11.929 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 522 000241: Aug 12 20:27:11.929 EST: CCE: sip_fetch_from_addr 000242: Aug 12 20:27:11.929 EST: CCE: sip_fetch_sip_URI 000243: Aug 12 20:27:11.929 EST: CCE: sip_fetch_to_addr 000244: Aug 12 20:27:11.929 EST: CCE: sip_fetch_sip_URI 000245: Aug 12 20:27:11.929 EST: CCE: sip_fetch_sip_URI 000246: Aug 12 20:27:11.933 EST: CCE: sip_fetch_cseq 000247: Aug 12 20:27:11.933 EST: CCE: sip_fetch_seq_no 000248: Aug 12 20:27:11.933 EST: CCE: SIP : Deleting early INVITE dialog 000249: Aug 12 20:27:11.933 EST: CCE: SIP : SIP session state = 4 000250: Aug 12 20:27:11.933 EST: CCE: Last class in child policy = C0000022 000251: Aug 12 20:27:11.933 EST: FIREWALL: Pregen without any dialog 000252: Aug 12 20:27:11.953 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 1145 000253: Aug 12 20:27:11.953 EST: CCE: sip_fetch_from_addr 000254: Aug 12 20:27:11.957 EST: CCE: sip_fetch_sip_URI 000255: Aug 12 20:27:11.957 EST: CCE: sip_fetch_to_addr 000256: Aug 12 20:27:11.957 EST: CCE: sip_fetch_sip_URI 000257: Aug 12 20:27:11.957 EST: CCE: sip_fetch_sip_URI 000258: Aug 12 20:27:11.957 EST: CCE: sip_fetch_cseq 000259: Aug 12 20:27:11.957 EST: CCE: sip_fetch_seq_no 000260: Aug 12 20:27:11.957 EST: CCE: SIP: SDP Parser: Addr mismatch, num_ports: 0 media.addr: 63.104.240.97 000261: Aug 12 20:27:11.957 EST: CCE: SIP : SIP session state = 1 000262: Aug 12 20:27:11.957 EST: CCE: Last class in child policy = C0000022 000263: Aug 12 20:27:12.045 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 446 000264: Aug 12 20:27:12.045 EST: CCE: sip_fetch_from_addr 000265: Aug 12 20:27:12.045 EST: CCE: sip_fetch_sip_URI 000266: Aug 12 20:27:12.045 EST: CCE: sip_fetch_to_addr 000267: Aug 12 20:27:12.045 EST: CCE: sip_fetch_sip_URI 000268: Aug 12 20:27:12.045 EST: CCE: sip_fetch_cseq 000269: Aug 12 20:27:12.045 EST: CCE: sip_fetch_seq_no 000270: Aug 12 20:27:12.045 EST: CCE: sip_fetch_sip_URI 000271: Aug 12 20:27:12.045 EST: CCE: SIP : SIP session state = 1 000272: Aug 12 20:27:12.045 EST: CCE: Last class in child policy = C0000022 000273: Aug 12 20:27:12.768 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 538 000274: Aug 12 20:27:12.768 EST: CCE: sip_fetch_from_addr 000275: Aug 12 20:27:12.768 EST: CCE: sip_fetch_sip_URI 000276: Aug 12 20:27:12.772 EST: CCE: sip_fetch_to_addr 000277: Aug 12 20:27:12.772 EST: CCE: sip_fetch_sip_URI 000278: Aug 12 20:27:12.772 EST: CCE: sip_fetch_sip_URI 000279: Aug 12 20:27:12.772 EST: CCE: sip_fetch_cseq 000280: Aug 12 20:27:12.772 EST: CCE: sip_fetch_seq_no 000281: Aug 12 20:27:12.772 EST: CCE: SIP : SIP session state = 1 000282: Aug 12 20:27:12.772 EST: CCE: Last class in child policy = C0000022 000283: Aug 12 20:27:12.804 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 521 000284: Aug 12 20:27:12.804 EST: CCE: sip_fetch_from_addr 000285: Aug 12 20:27:12.804 EST: CCE: sip_fetch_sip_URI 000286: Aug 12 20:27:12.804 EST: CCE: sip_fetch_to_addr 000287: Aug 12 20:27:12.804 EST: CCE: sip_fetch_sip_URI 000288: Aug 12 20:27:12.804 EST: CCE: sip_fetch_cseq 000289: Aug 12 20:27:12.804 EST: CCE: sip_fetch_seq_no 000290: Aug 12 20:27:12.804 EST: CCE: sip_fetch_sip_URI 000291: Aug 12 20:27:12.804 EST: CCE: Last class in child policy = C0000022 000292: Aug 12 20:27:16.479 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 755 000293: Aug 12 20:27:16.479 EST: CCE: sip_fetch_from_addr 000294: Aug 12 20:27:16.479 EST: CCE: sip_fetch_sip_URI 000295: Aug 12 20:27:16.479 EST: CCE: sip_fetch_to_addr 000296: Aug 12 20:27:16.479 EST: CCE: sip_fetch_sip_URI 000297: Aug 12 20:27:16.479 EST: CCE: sip_fetch_cseq 000298: Aug 12 20:27:16.479 EST: CCE: sip_fetch_seq_no 000299: Aug 12 20:27:16.483 EST: CCE: sip_fetch_sip_URI 000300: Aug 12 20:27:16.483 EST: CCE: SIP: SDP Parser: Addr mismatch, num_ports: 0 media.addr: 12.238.153.251 000301: Aug 12 20:27:16.483 EST: CCE: update_sip_media 000302: Aug 12 20:27:16.483 EST: CCE: SIP : SIP session state = 2 000303: Aug 12 20:27:16.483 EST: CCE: Last class in child policy = C0000022 000304: Aug 12 20:27:16.483 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip-RTP-data session: initiator (12.238.153.251:19416) -- responder (10.240.0.75:5028) 000305: Aug 12 20:27:16.483 EST: FIREWALL sis 84A0E4A0: session 84A0E4A0 (12.238.153.251:19416) ==> (10.240.0.75:5028) already added to dialog - l7_protocol = 48, sis_type = 2 000306: Aug 12 20:27:16.531 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 700 000307: Aug 12 20:27:16.531 EST: CCE: sip_fetch_from_addr 000308: Aug 12 20:27:16.531 EST: CCE: sip_fetch_sip_URI 000309: Aug 12 20:27:16.531 EST: CCE: sip_fetch_to_addr 000310: Aug 12 20:27:16.531 EST: CCE: sip_fetch_sip_URI 000311: Aug 12 20:27:16.531 EST: CCE: sip_fetch_sip_URI 000312: Aug 12 20:27:16.531 EST: CCE: sip_fetch_cseq 000313: Aug 12 20:27:16.531 EST: CCE: sip_fetch_seq_no 000314: Aug 12 20:27:16.535 EST: CCE: SIP : SIP session state = 3 000315: Aug 12 20:27:16.535 EST: CCE: Last class in child policy = C0000022 000316: Aug 12 20:27:21.482 EST: %FW-6-SESS_AUDIT_TRAIL_START: (target:class)-(InsideToOutside:sip_class):Start sip-RTCP-data session: initiator (12.238.153.251:19417) -- responder (10.240.0.75:5029) 000317: Aug 12 20:27:21.482 EST: FIREWALL sis 84A0E8A0: session 84A0E8A0 (12.238.153.251:19417) ==> (10.240.0.75:5029) already added to dialog - l7_protocol = 49, sis_type = 2 000318: Aug 12 20:27:22.770 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 538 000319: Aug 12 20:27:22.770 EST: CCE: sip_fetch_from_addr 000320: Aug 12 20:27:22.770 EST: CCE: sip_fetch_sip_URI 000321: Aug 12 20:27:22.770 EST: CCE: sip_fetch_to_addr 000322: Aug 12 20:27:22.770 EST: CCE: sip_fetch_sip_URI 000323: Aug 12 20:27:22.770 EST: CCE: sip_fetch_sip_URI 000324: Aug 12 20:27:22.770 EST: CCE: sip_fetch_cseq 000325: Aug 12 20:27:22.770 EST: CCE: sip_fetch_seq_no 000326: Aug 12 20:27:22.770 EST: CCE: SIP : SIP session state = 1 000327: Aug 12 20:27:22.770 EST: CCE: Last class in child policy = C0000022 000328: Aug 12 20:27:22.806 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 515 000329: Aug 12 20:27:22.806 EST: CCE: sip_fetch_from_addr 000330: Aug 12 20:27:22.806 EST: CCE: sip_fetch_sip_URI 000331: Aug 12 20:27:22.806 EST: CCE: sip_fetch_to_addr 000332: Aug 12 20:27:22.806 EST: CCE: sip_fetch_sip_URI 000333: Aug 12 20:27:22.806 EST: CCE: sip_fetch_cseq 000334: Aug 12 20:27:22.806 EST: CCE: sip_fetch_seq_no 000335: Aug 12 20:27:22.806 EST: CCE: sip_fetch_sip_URI 000336: Aug 12 20:27:22.806 EST: CCE: Last class in child policy = C0000022 000337: Aug 12 20:27:32.783 EST: CCE: I2R = 0, source = 12.238.153.251:5060, dest = 10.240.0.75:1024, state_object = 0x857AB51C, data_len = 356 000338: Aug 12 20:27:32.783 EST: CCE: sip_fetch_from_addr 000339: Aug 12 20:27:32.783 EST: CCE: sip_fetch_sip_URI 000340: Aug 12 20:27:32.783 EST: CCE: sip_fetch_to_addr 000341: Aug 12 20:27:32.783 EST: CCE: sip_fetch_sip_URI 000342: Aug 12 20:27:32.783 EST: CCE: sip_fetch_cseq 000343: Aug 12 20:27:32.783 EST: CCE: sip_fetch_seq_no 000344: Aug 12 20:27:32.783 EST: CCE: SIP : SIP session state = 3 000345: Aug 12 20:27:32.783 EST: CCE: Last class in child policy = C0000022 000346: Aug 12 20:27:32.831 EST: CCE: I2R = 1, source = 10.240.0.75:5060, dest = 12.238.153.251:5060, state_object = 0x857AB51C, data_len = 485 000347: Aug 12 20:27:32.831 EST: CCE: sip_fetch_from_addr 000348: Aug 12 20:27:32.831 EST: CCE: sip_fetch_sip_URI 000349: Aug 12 20:27:32.831 EST: CCE: sip_fetch_to_addr 000350: Aug 12 20:27:32.831 EST: CCE: sip_fetch_sip_URI 000351: Aug 12 20:27:32.831 EST: CCE: sip_fetch_cseq 000352: Aug 12 20:27:32.831 EST: CCE: sip_fetch_seq_no 000353: Aug 12 20:27:32.831 EST: CCE: sip_fetch_sip_URI 000354: Aug 12 20:27:32.831 EST: CCE: SIP : SIP session state = 4 000355: Aug 12 20:27:32.831 EST: CCE: Last class in child policy = C0000022 000356: Aug 12 20:27:32.831 EST: FIREWALL: Pregen without any dialog 000357: Aug 12 20:27:32.831 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip-RTP-data session: initiator (12.238.153.251:19416) sent 140008 bytes -- responder (10.240.0.75:5028) sent 140180 bytes 000358: Aug 12 20:27:32.831 EST: FIREWALL sis 84A0E4A0: Appl cookie is empty 000359: Aug 12 20:27:32.831 EST: FIREWALL: Pregen 84A0E6A0 dialog is empty 000360: Aug 12 20:27:32.835 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip-RTCP-data session: initiator (12.238.153.251:19417) sent 192 bytes -- responder (10.240.0.75:5029) sent 0 bytes 000361: Aug 12 20:27:32.835 EST: FIREWALL sis 84A0E8A0: Appl cookie is empty 000362: Aug 12 20:27:32.835 EST: FIREWALL: Pregen 84A0EAA0 dialog is empty 000363: Aug 12 20:27:32.835 EST: FIREWALL: Pregen without any dialog 000364: Aug 12 20:27:32.835 EST: FIREWALL: Pregen without any dialog 000365: Aug 12 20:27:42.580 EST: %FW-6-LOG_SUMMARY: 12 packets were dropped from 12.238.153.251:5060 => 10.240.0.75:5060 (target:class)-(OutsideToInside:class-default) 000366: Aug 12 20:28:03.098 EST: %FW-6-SESS_AUDIT_TRAIL: (target:class)-(InsideToOutside:sip_class):Stop sip session: initiator (10.240.0.75:5060) sent 4855 bytes -- responder (12.238.153.251:5060) sent 3153 bytes 000367: Aug 12 20:28:03.098 EST: FIREWALL sis 84A0DEA0: Sis extension deleted 000368: Aug 12 20:28:09.756 EST: %FW-6-DROP_PKT: Dropping tcp session 208.70.245.94:110 10.240.0.113:4387 due to Out-Of-Order Segment with ip ident 0