diff --git a/entry/src/kni_entry.cpp b/entry/src/kni_entry.cpp
index bd7a061..5181d0c 100644
--- a/entry/src/kni_entry.cpp
+++ b/entry/src/kni_entry.cpp
@@ -1011,7 +1011,7 @@ error_out:
 	if(buff != NULL){
 		FREE(&buff);
 	}
-	return APP_STATE_DROPPKT | APP_STATE_KILL_OTHER | APP_STATE_DROPME;
+	return APP_STATE_FAWPKT | APP_STATE_KILL_OTHER | APP_STATE_DROPME;
 }
 
 static int dabloom_search(struct pkt_info *pktinfo, int thread_seq){
@@ -1202,7 +1202,7 @@ static char data_opstate(struct streaminfo *stream, struct pme_info *pmeinfo, co
 
 
 static char close_opstate(const struct streaminfo *stream, struct pme_info *pmeinfo, int thread_seq){
-	//close: a_packet = null, do not sendto tfe
+	//close: because of timeout, return value has no meaning
 	switch(pmeinfo->action){
 		case KNI_ACTION_INTERCEPT:
 			TLD_append_streaminfo(g_tsg_log_instance, pmeinfo->tld_handle, (struct streaminfo*)pmeinfo->stream);
@@ -1210,7 +1210,7 @@ static char close_opstate(const struct streaminfo *stream, struct pme_info *pmei
 			MESA_htable_search(g_kni_handle->traceid2pme_htable, (const unsigned char*)pmeinfo->stream_traceid, 
 						strnlen(pmeinfo->stream_traceid, sizeof(pmeinfo->stream_traceid)));
 			tuple2stream_htable_del(stream, thread_seq);
-			return APP_STATE_DROPPKT | APP_STATE_KILL_OTHER | APP_STATE_DROPME;
+			return APP_STATE_FAWPKT | APP_STATE_DROPME;
 		//stream has no data.
 		default:
 			return APP_STATE_FAWPKT | APP_STATE_DROPME;