Feb 7 23:02:18 sslo1.f5labs.com info tmm1[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:894e0cf5: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:57904 -> 64.233.170.95:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (content-autofill.googleapis.com) decryption-status: decrypted duration: 90 msec service-path: ssloSC_all_services client-bytes-in: 1541 client-bytes-out: 1704 server-bytes-in: 5855 server-bytes-out: 1471 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Web_Infrastructure ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:02:18 sslo1.f5labs.com info tmm3[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:e38d3d37: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:40194 -> 74.125.130.106:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (www.google.com) decryption-status: decrypted duration: 575 msec service-path: ssloSC_all_services client-bytes-in: 5330 client-bytes-out: 67221 server-bytes-in: 72112 server-bytes-out: 6371 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:02:18 sslo1.f5labs.com info tmm1[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:8bfc5676: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:40202 -> 74.125.130.106:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (www.google.com) decryption-status: decrypted duration: 230 msec service-path: ssloSC_all_services client-bytes-in: 3928 client-bytes-out: 5356 server-bytes-in: 9088 server-bytes-out: 4235 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:02:22 sslo1.f5labs.com info tmm[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:46ca08b3: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:50796 -> 74.125.24.94:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 unknown (fonts.gstatic.com) decryption-status: decrypted duration: 5000 msec service-path: NA client-bytes-in: 836 client-bytes-out: 411 server-bytes-in: 4525 server-bytes-out: 607 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'cl side error' policy-rule: 'L7 Protocol Lookup' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: |access2 ctx:0x400010b78340 { Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | state:Finish [done], Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | pstate:Failing, nevent:FINISHED, external:1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | deferred [0/0]: 0 {} Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | tracker { Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | { Start:1, p:(None, External), n:(Evaluate, STARTED) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | { Evaluate:7, p:(Start, STARTED), n:(Failing, ERROR) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | { Failing:2, p:(Evaluate, ERROR), n:(Finish, FINISHED) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | { Finish:1, p:(Failing, FINISHED), n:(None, External) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | node: 0x400010b78300 Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | axs2_main_ctx: 0x400010b783e0 { Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | apx { Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | current agent:L7 Protocol Lookup Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | agent execution status:Need more data to start policy Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | current hook:CLIENTSSL_SERVER_CERT Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | result:4 Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow-variables { Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.agent_category_lookup.type=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.agent_license.type=3, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.client.ip.address=10.1.10.50, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.client.port=50796, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.result.categories=| 76 |, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.failure=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.result.hostname=fonts.gstatic.com, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.result.numcategories=1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.result.numcustomcategories=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.result.primarycategory=76, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.category_lookup.result.url=https://fonts.gstatic.com/, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.session.id=6cc6bb010a010a324a7d185e46ca08b3, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.ssl.bypass_default=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.server.ip.address=74.125.24.94, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.server.port=443, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.session_check.session_found=1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.ssl_check.ssl_found=1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.ssl.client_cipher_name=ECDHE-RSA-AES128-GCM-SHA256, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.ssl.client_cipher_version=TLSv1.2, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.ssl.server_cipher_name=ECDHE-ECDSA-AES128-GCM-SHA256, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | perflow.ssl.server_cipher_version=TLSv1.2, Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | held[0/4]: 0x4000106c2f08 {} Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm[27190]: 01870014:5: |} Feb 7 23:02:22 sslo1.f5labs.com info tmm1[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:c192bb23: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:34506 -> 142.251.175.94:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 unknown (www.gstatic.com) decryption-status: decrypted duration: 5000 msec service-path: NA client-bytes-in: 963 client-bytes-out: 2659 server-bytes-in: 4526 server-bytes-out: 605 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'cl side error' policy-rule: 'L7 Protocol Lookup' url-category: /Common/Web_Infrastructure ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: |access2 ctx:0x4000a742fb00 { Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | state:Finish [done], Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | pstate:Failing, nevent:FINISHED, external:1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | deferred [0/0]: 0 {} Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | tracker { Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | { Start:1, p:(None, External), n:(Evaluate, STARTED) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | { Evaluate:7, p:(Start, STARTED), n:(Failing, ERROR) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | { Failing:2, p:(Evaluate, ERROR), n:(Finish, FINISHED) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | { Finish:1, p:(Failing, FINISHED), n:(None, External) } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | node: 0x4000a742fac0 Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | axs2_main_ctx: 0x4000a742fba0 { Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | apx { Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | current agent:L7 Protocol Lookup Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | agent execution status:Need more data to start policy Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | current hook:CLIENTSSL_SERVER_CERT Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | result:4 Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow-variables { Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.agent_category_lookup.type=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.agent_license.type=3, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.client.ip.address=10.1.10.50, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.client.port=34506, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.result.categories=| 147 |, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.failure=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.result.hostname=www.gstatic.com, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.result.numcategories=1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.result.numcustomcategories=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.result.primarycategory=147, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.category_lookup.result.url=https://www.gstatic.com/, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.session.id=ca86bb010a010a328efbaf5ec192bb23, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.ssl.bypass_default=0, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.server.ip.address=142.251.175.94, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.server.port=443, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.session_check.session_found=1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.ssl_check.ssl_found=1, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.ssl.client_cipher_name=ECDHE-RSA-AES128-GCM-SHA256, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.ssl.client_cipher_version=TLSv1.2, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.ssl.server_cipher_name=ECDHE-ECDSA-AES128-GCM-SHA256, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | perflow.ssl.server_cipher_version=TLSv1.2, Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | held[0/4]: 0x4000a6b60848 {} Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: | } Feb 7 23:02:22 sslo1.f5labs.com notice tmm1[27190]: 01870014:5: |} Feb 7 23:02:23 sslo1.f5labs.com info tmm3[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:f3330fc6: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:40210 -> 74.125.130.106:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 unknown (www.google.com) decryption-status: decrypted duration: 5001 msec service-path: NA client-bytes-in: 836 client-bytes-out: 411 server-bytes-in: 4493 server-bytes-out: 749 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'cl side error' policy-rule: 'L7 Protocol Lookup' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: |access2 ctx:0x4001e32760c0 { Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | state:Finish [done], Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | pstate:Failing, nevent:FINISHED, external:1, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | deferred [0/0]: 0 {} Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | tracker { Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | { Start:1, p:(None, External), n:(Evaluate, STARTED) } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | { Evaluate:7, p:(Start, STARTED), n:(Failing, ERROR) } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | { Failing:2, p:(Evaluate, ERROR), n:(Finish, FINISHED) } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | { Finish:1, p:(Failing, FINISHED), n:(None, External) } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | node: 0x4001e3276080 Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | axs2_main_ctx: 0x4001e3276160 { Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | apx { Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | current agent:L7 Protocol Lookup Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | agent execution status:Need more data to start policy Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | current hook:CLIENTSSL_SERVER_CERT Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | result:4 Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow-variables { Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.agent_category_lookup.type=0, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.agent_license.type=3, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.client.ip.address=10.1.10.50, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.client.port=40210, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.result.categories=| 76 |, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.failure=0, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.result.hostname=www.google.com, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.result.numcategories=1, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.result.numcustomcategories=0, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.result.primarycategory=76, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.category_lookup.result.url=https://www.google.com/, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.session.id=129dbb010a010a324a7d826af3330fc6, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.ssl.bypass_default=0, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.server.ip.address=74.125.130.106, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.server.port=443, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.session_check.session_found=1, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.ssl_check.ssl_found=1, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.ssl.client_cipher_name=ECDHE-RSA-AES128-GCM-SHA256, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.ssl.client_cipher_version=TLSv1.2, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.ssl.server_cipher_name=ECDHE-ECDSA-AES128-GCM-SHA256, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | perflow.ssl.server_cipher_version=TLSv1.2, Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | held[0/4]: 0x4001e21602a8 {} Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: | } Feb 7 23:02:23 sslo1.f5labs.com notice tmm3[27190]: 01870014:5: |} Feb 7 23:04:06 sslo1.f5labs.com info tmm2[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:cc20828d: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:43732 -> 20.122.63.128:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-RSA-AES256-GCM-SHA384 L7 https (p.clarity.ms) decryption-status: decrypted duration: 141404 msec service-path: ssloSC_all_services client-bytes-in: 4758 client-bytes-out: 2779 server-bytes-in: 7430 server-bytes-out: 5459 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Information_Technology ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:04:06 sslo1.f5labs.com info tmm[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:4cd5a292: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:56710 -> 64.233.170.113:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (www.google-analytics.com) decryption-status: decrypted duration: 127837 msec service-path: ssloSC_all_services client-bytes-in: 2080 client-bytes-out: 1261 server-bytes-in: 5472 server-bytes-out: 1795 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Web_Analytics ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:04:06 sslo1.f5labs.com info tmm3[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:1be0b84e: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:45186 -> 74.125.24.113:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (encrypted-tbn0.gstatic.com) decryption-status: decrypted duration: 137047 msec service-path: ssloSC_all_services client-bytes-in: 1663 client-bytes-out: 5300 server-bytes-in: 6761 server-bytes-out: 1357 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:04:37 sslo1.f5labs.com info tmm[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:555d6c57: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:40204 -> 74.125.130.106:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (www.google.com) decryption-status: decrypted duration: 139350 msec service-path: ssloSC_all_services client-bytes-in: 3921 client-bytes-out: 5015 server-bytes-in: 8416 server-bytes-out: 3916 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:04:37 sslo1.f5labs.com info tmm[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:65f4f1ef: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:52086 -> 172.217.194.156:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (adservice.google.com) decryption-status: decrypted duration: 139270 msec service-path: ssloSC_all_services client-bytes-in: 1976 client-bytes-out: 6047 server-bytes-in: 7564 server-bytes-out: 1617 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'NA' policy-rule: 'All Traffic' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan Feb 7 23:04:37 sslo1.f5labs.com info tmm1[27190]: 01c40000:6: /Common/sslo_demoL3.app/sslo_demoL3_accessProfile:Common:5923c4de: /Common/sslo_demoL3.app/sslo_demoL3-in-t-4 Traffic summary - tcp 10.1.10.50:40208 -> 74.125.130.106:443 clientSSL: TLSv1.2 ECDHE-RSA-AES128-GCM-SHA256 serverSSL: TLSv1.2 ECDHE-ECDSA-AES128-GCM-SHA256 L7 https (www.google.com) decryption-status: decrypted duration: 139321 msec service-path: ssloSC_all_services client-bytes-in: 4221 client-bytes-out: 4891 server-bytes-in: 4494 server-bytes-out: 604 client-tls-handshake: completed server-tls-handshake: completed reset-cause: 'connector service shutdown timeout' policy-rule: 'All Traffic' url-category: /Common/Search_Engines_and_Portals ingress: /Common/client-vlan egress: /Common/outbound-vlan