http/2 connection session id

CHOE-KyungJun — Mon, 11 Apr 2022 08:14:30 GMT

Dear Team,

I have a question while checking the traffic log.

In general, we know that each id is created when the session is created.

However, the http/2 connection session id is identified as the same id.

I know that when the session id is input according to the link below, it is input as the parent session ID. (The ssl session is displayed as 0)

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslog-field-descriptions/traffic-log-fields

is it normal working to display with the same id.

in addition, I want to know why they are displayed with the same session-id.

thanks in advance,
Kyungjun,

Re: http/2 connection session id

BPry — Mon, 11 Apr 2022 21:21:33 GMT

@CHOE-KyungJun,

This is normal and expected behavior. The HTTP/2 connection session is different from the stream sessions, they effectively act as a overarching parent session when using HTTP/2

topic http/2 connection session id in General Topics

http/2 connection session id

Re: http/2 connection session id