http/2 connection session id

[CHOE-KyungJun]

Dear Team,

I have a question while checking the traffic log.

In general, we know that each id is created when the session is created.

However, the http/2 connection session id is identified as the same id.

I know that when the session id is input according to the link below, it is input as the parent session ID. (The ssl session is displayed as 0)

https://docs.paloaltonetworks.com/pan-os/9-1/pan-os-admin/monitoring/use-syslog-for-monitoring/syslo...

is it normal working to display with the same id.

in addition, I want to know why they are displayed with the same session-id.

thanks in advance,
Kyungjun,

[BPry · Accepted solution]

@CHOE-KyungJun,

This is normal and expected behavior. The HTTP/2 connection session is different from the stream sessions, they effectively act as a overarching parent session when using HTTP/2