The remote port translation information at the time the connection was established does not match the information assigned to the current inbound packet. This can occur if the connection was initiated in the clear but is currently using a UDP-encapsulated tunnel or vice versa. If this is the case, the value of originst or currinst will be 0.

timestamp is the stack timestamp that indicates the time at which the failure was detected by the stack. This time is retrieved from the system time-of-day clock, which usually reflects coordinated universal time. This timestamp might be different than the syslogd message timestamp.

sipaddr is the public source IP address.

dipaddr is the destination IP address.

srcport is the translated connection source port.

dstport is the connection destination port.

origport is the original connection source port from the inbound packet.

originst is the translated port instance ID at the time the connection was established.

currinst is the translated port instance ID assigned to the current packet.