We propose two types of per-flow entry verification schemes for already-deployed commercial Software Defined Networking (SDN) based networks with network service header (NSH)-disabled OpenFlow systems. Although OpenFlow-based SDN is a promising candidate for easing the delivery and deployment of new and existing services, its packet forwarding mechanism is more complicated than IP routing and Ethernet forwarding. This may cause an increase in the number of misconfigurations concerning packet forwarding, making it more difficult to detect and localize the misconfigurations. Recently, the Internet Engineering Task Force (IETF) proposed the NSH in order to address these problems, but already deployed commercial networks (legacy-SDN networks) are unable to adopt it. The proposed schemes address these problems by forwarding the test packets that are created with user packet-flows, and by checking the test packet trajectories for legacy-SDN networks. We present demonstration results on the feasibility of the schemes based on prototype systems. In addition, we present the impact on the packet forwarding performance for user packets when applying the proposed schemes. The applicability of the proposed schemes is also shown based on evaluation of the prototyped systems.