From: Tim (ccie2be@nyc.rr.com)
Date: Wed Feb 15 2006 - 20:28:50 GMT-3
Mark,
That's great stuff to know but having read Ian Strong's post, how did you
find that out?
Tim
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Mark
Lasarko
Sent: Wednesday, February 15, 2006 12:19 PM
To: ccielab@groupstudy.com
Subject: RE: FW: show logg
FYI: (Answering my own question, if anyone was curious?)
SEC-6-IPACCESSLOGP - TCP and UDP
SEC-6-IPACCESSLOGNP - IP and any other remaining protocols
SEC-6-IPACCESSLOGDP - ICMP
SEC-6-IPACCESSLOGS - Standard access-list entry without any protcol
SEC-6-IPACCESSLOGRP - GRE, IGMP, OSPF, IGRP, NOSIP, NEWIGRP, IPINIP, PIM
JP - Can you share any other details?
Perhaps a 'sh ip access-list' or additional 'sh log' from ACL91?
The "NP" indicates "IP and any other remaining protocols";
Non-specific - access-list 91 permit any log?
Curious now!
~M
That and...
If anybody can elaborate on the mnemonic(s):
IPACCESSLOGDP
vs
IPACCESSLOGNP
vs
IPACCESSLOGP
vs
IPACCESSLOGRP
vs
IPACCESSLOGS
I am a bit curious about that part myself.
(Aside from "A packet matching the log criteria for the given access list
has
been detected")
~M
>>> "Jens Petter Eikeland" <jenseike@start.no> 02/15/06 9:53 AM >>>
Yes, I know that it is matching a specific access-list, that was really
cleare... what I was wandering is the "0.0.0.0" output in the line.. what
Does that mean.. I just wanted to make sure this is nothing I need to be
Aware of
jp
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Venkatesh Palani
Sent: 15. februar 2006 15:35
To: Jens Petter Eikeland
Cc: ccielab@groupstudy.com
Subject: Re: FW: show logg
*from O/p Interpretor*
**
*ERROR MESSAGE NOTIFICATIONS (if any)*
*%SEC-6-IPACCESSLOGNP (x1)*: list [chars] [chars] [dec] [IP_address]
[chars]->
[IP_address], [dec] packet[chars]
*Explanation:* A packet matching the log criteria for the given access list
has
been detected.
*Recommended Action:* No action is required.
HTH,
Venkatesh
On 2/16/06, Jens Petter Eikeland <jenseike@start.no> wrote:
>
> What does this log output mean ?
>
> 40w5d: %SEC-6-IPACCESSLOGNP: list 91 permitted 0 0.0.0.0 -> 150.100.1.1,
> 250
> packets
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
This archive was generated by hypermail 2.1.4 : Wed Mar 01 2006 - 11:28:18 GMT-3