Who Me Too'd this topic

Hi Guys,

Has anyone come across this when the aged-out SIP session being left in the DISCARD state and the only way you can fix the issue is to clear the session with > clear session id 380025 command.

xxxxxxxxxxxxxx(active)> show session all filter source xxxxxxxxxxxxxx
--------------------------------------------------------------------------------
ID          Application    State   Type Flag  Src[Sport]/Zone/Proto (translated IP[Port])
Vsys                                          Dst[Dport]/Zone (translated IP[Port])
--------------------------------------------------------------------------------
293393       sip            ACTIVE  PRED       xxxxxxxxxxxxxx[0]/Campus/17  (xxxxxxxxxxxxxx[0])
vsys1                                         xxxxxxxxxxxxxx[5060]/DC-DMZ  (xxxxxxxxxxxxxx[5060])
364602       sip            ACTIVE  FLOW       xxxxxxxxxxxxxx[5060]/Campus/17  (xxxxxxxxxxxxxx[5060])
vsys1                                         xxxxxxxxxxxxxx[5060]/DC-DMZ  (xxxxxxxxxxxxxx[5060])
380025       sip            DISCARD FLOW       xxxxxxxxxxxxxx[5060]/Campus/17  (xxxxxxxxxxxxxx[5060])
vsys1                                         xxxxxxxxxxxxxx[5060]/DC-DMZ  (xxxxxxxxxxxxxx[5060])
xxxxxxxxxxxxxx(active)> show session id 380025

Session          380025

        c2s flow:
                source:     xxxxxxxxxxxxxx [Campus]
                dst:         xxxxxxxxxxxxxx
                proto:       17
                sport:       5060            dport:      5060
                state:       DISCARD         type:       FLOW
                src user:    unknown
                dst user:    unknown
                offload:     Yes

        s2c flow:
                source:     xxxxxxxxxxxxxx [DC-DMZ]
                dst:         xxxxxxxxxxxxxx
                proto:       17
                sport:       5060            dport:      5060
                state:       DISCARD         type:       FLOW
                src user:    unknown
                dst user:    unknown
                offload:     Yes

        DP                                   : 0
        index(local):                        : 380025
        start time                           : Tue Feb 22 07:54:47 2017
        timeout                              : 60 sec
        time to live                         : 59 sec
        total byte count(c2s)                : 18691897
        total byte count(s2c)                : 18853287
        layer7 packet count(c2s)             : 34237
        layer7 packet count(s2c)             : 34185
        vsys                                 : vsys1
        application                          : sip 
        session to be logged at end          : False
        session in session ager              : True
        session updated by HA peer           : False
        layer7 processing                    : enabled
        URL filtering enabled                : True
        URL category                         : any
        session via prediction               : True
        use parent's policy                  : True
        parent session                       : 124110
        refresh parent session               : True
        session via syn-cookies              : False
        session terminated on host           : False
        session traverses tunnel             : False
        captive portal session               : False
        ingress interface                    : ethernet1/23
        egress interface                     : ethernet1/24.3306
        session QoS rule                     : N/A (class 4)
        tracker stage firewall               : session rematch
        end-reason                           : aged-out
xxxxxxxxxxxxxx(active)> clear session id 380025

Thx,

Myky

pinging @reaper@BPry@kiwi