FortiGate Session State Bits

# session-state1

| Flag                  | Bit | Hex        |
| --------------------- | --- | -----------|
| NEW                   |   0 | 0x00000001 |
| REDIRECT              |   1 | 0x00000002 |
| LOG                   |   2 | 0x00000004 |
| BLOCK                 |   3 | 0x00000008 |
| IPSEC                 |   4 | 0x00000010 |
| WCCP                  |   6 | 0x00000040 |
| DIRTY                 |   7 | 0x00000080 |
| LOCAL                 |   8 | 0x00000100 |
| MAY_DIRTY             |   9 | 0x00000200 |
| PER_IP                |  10 | 0x00000400 |
| AUTH                  |  11 | 0x00000800 |
| NIDSBLOCK             |  12 | 0x00001000 |
| NIDSRAW               |  13 | 0x00002000 |
| NIDSSTAT              |  14 | 0x00004000 |
| BR                    |  15 | 0x00008000 |
| NPU                   |  16 | 0x00010000 |
| NPU_DENY              |  17 | 0x00020000 |
| SRC_VIS               |  18 | 0x00040000 |
| IPSEC_SKIP_SRC_CHECK  |  19 | 0x00080000 |
| DONT_LOAD_BALANCE     |  20 | 0x00100000 |
| DST_VIS               |  21 | 0x00200000 |
| IPS_TCP_3WAY          |  22 | 0x00400000 |
| SNIFF_PACKET          |  23 | 0x00800000 |
| AUTH_PASSED           |  24 | 0x01000000 |
| SESSION_NEED_SYNC     |  25 | 0x02000000 |
| SESSION_SYNCED        |  26 | 0x04000000 |
| SHAPE                 |  27 | 0x08000000 |
| HA_REPLICATE          |  29 | 0x20000000 |
| NIDSRAW_INTF          |  30 | 0x40000000 |
| EXPECT                |  31 | 0x80000000 |

# session-state 2

| Flag                  | Bit | Hex        |
| --------------------- | --- | -----------|
| LOG_FAILED_ATTEMPT    |   0 | 0x00000001 |
| LOG_FAILED_DNS        |   1 | 0x00000002 |
| LOG_FAILED_IP_CONN    |   2 | 0x00000004 |
| PCP_SNAT              |   3 | 0x00000008 |
| PCP_DNAT              |   4 | 0x00000010 |
| INHERIT_SOCKPORT      |   6 | 0x00000040 |
| NETFLOW_ORIG          |   8 | 0x00000100 |
| NETFLOW_RPLY          |   9 | 0x00000200 |
| SYNC                  |  10 | 0x00000400 |
| FEC                   |  11 | 0x00000800 |
| NOSYNC                |  12 | 0x00001000 |
| CSF                   |  13 | 0x00002000 |
| APP                   |  14 | 0x00004000 |
| URL_CAT               |  15 | 0x00008000 |
| KEEP_ROUTE            |  16 | 0x00010000 |
| CLUSTER_SYNC          |  17 | 0x00020000 |
| EXP_NOTIFY            |  18 | 0x00040000 |
| PACKET_DUPLICATION    |  19 | 0x00080000 |
| PACKET_DUP_FORCE      |  20 | 0x00100000 |
| PACKET_DE_DUPLICATION |  21 | 0x00200000 |
| DYNAMIC_SHAPING       |  22 | 0x00400000 |
| TCP_3WAY_RTT          |  23 | 0x00800000 |
| ACCESS_PROXY          |  24 | 0x01000000 |
| PACKET_DUP_SERVICE    |  25 | 0x02000000 |
| PACKET_DUP_RPDB       |  26 | 0x04000000 |
| HW_SESSION            |  27 | 0x08000000 |
| LO_FWD                |  28 | 0x10000000 |
| LI_REDIR              |  29 | 0x20000000 |
| LO_MFPM_FWD           |  30 | 0x40000000 |
| LI_MFPM_REDIR         |  31 | 0x80000000 |