In case of TCP flow, when TCP connection is closed session is logged for the teardown but the action field is empty in reverse flow info.
Also sg_rule_uuid and nw_ace_uuid in reverse flow are all zero.
sample session log for the teardown:
2017-10-27 Fri 15:22:16:339.692 IST nodec62 [Thread 140329144252160, Pid 9391]: [SYS_INFO]: SessionEndpointObject: session_data= [ [ [ vmi = default-domain:admin:aa208e72-691c-4ccd-b725-459aee872957 vn = default-domain:admin:vn2 security_policy_rule = 00000000-0000-0000-0000-000000000001 remote_vn = default-domain:admin:vn1 is_client_session = 0 is_si = 0 remote_prefix = vrouter_ip = 10.204.217.102 sess_agg_info= [ [ [ ip = 2.2.2.4 port = 22 protocol = 6 ] [ sampled_forward_bytes = 660 sampled_forward_pkts = 9 sampled_reverse_bytes = 618 sampled_reverse_pkts = 5 logged_forward_bytes = 660 logged_forward_pkts = 9 logged_reverse_bytes = 618 logged_reverse_pkts = 5 sessionMap= [ [ [ ip = 1.1.1.4 port = 41133 ] [ forward_flow_info= [ sampled_bytes = 660 sampled_pkts = 9 logged_bytes = 660 logged_pkts = 9 flow_uuid = c111a65a-3d9a-46bf-9fcf-a8bc7e5647b5 tcp_flags = 0 setup_time = 1509097792472266 teardown_time = 1509097936339115 action = pass sg_rule_uuid = 32e756cf-53ef-4233-80cf-681c0f2ad628 nw_ace_uuid = 874ab189-0d13-4dcd-a303-2a40c902c24e underlay_source_port = 0 drop_reason = 0 ] reverse_flow_info= [ sampled_bytes = 618 sampled_pkts = 5 logged_bytes = 618 logged_pkts = 5 flow_uuid = 4708673d-ae13-4bc3-9250-a4acc3e832c9 tcp_flags = 0 setup_time = 1509097792472266 teardown_time = 1509097936339115 action = sg_rule_uuid = 00000000-0000-0000-0000-000000000000 nw_ace_uuid = 00000000-0000-0000-0000-000000000000 underlay_source_port = 0 drop_reason = 0 ] vm = b702ea3b-b110-4fc7-ac02-8851e87d1afe other_vrouter_ip = 10.204.216.69 underlay_proto = 2 ], ] ] ], ] ] ], ] ]
contrail version: 4.1.0.0-24, ubuntu 16, newton.
Review in progress for https:/
Submitter: Ashok Singh (<email address hidden>)