To everyone who replied,
Thanks. As it turns out I had upgraded to 12.0(10)GD on the router and all of
the other 2500's but didn't remember and as I don't have my e-mail at work
(separate network) I couldn't check when posting. I will try the extra lines in
the list as that definately makes sense.
Will let you know how it goes.
Rob O'Brien
CCNA
Canberra Australia
"Williamson, Paul" wrote:
> I think its due to the processing of the access-list, and that the router is
> not bothering to look into the packet to check port number, because the
> access-list is matching the ip address
>
> if you try and specify further ie
> access-list 150 permit tcp any any eq 1234 log
> access-list 150 permit tcp any any eq 2334 log
> access-list 150 permit ip any any eq log
>
> HTH
> -Paul
> -----Original Message-----
> From: Robert O'Brien [mailto:[EMAIL PROTECTED]]
> Sent: Thursday, November 30, 2000 11:40 AM
> To: Murphy, Brian J SSI-ISET-31
> Cc: [EMAIL PROTECTED]
> Subject: Re: Strange occurances in syslog
>
> Brian,
>
> I actually had it bothways. I was trying to see what was happening when one
> of
> our techs was trying to talk over ip to control a pabx.
>
> Thanks for the prompt reply.
>
> Rob.
>
> "Murphy, Brian J SSI-ISET-31" wrote:
>
> > I have seen this before with inbound access lists......dont know why it is
> > port 0, i beleive outbound access lists give the port numbers....
> >
> > Brian
> >
> > -----Original Message-----
> > From: Robert O'Brien [mailto:[EMAIL PROTECTED]]
> > Sent: Thursday, November 30, 2000 12:12 PM
> > To: [EMAIL PROTECTED]
> > Subject: Strange occurances in syslog
> >
> > Well I am stumped.
> >
> > The lines in the syslog from an "access-list 150 permit ip any any log"
> > are not returning the port numbers, just a zero. This makes it very
> > difficult to diagnose a traffic flow. This is being run on a 2500 series
> > router with I think it was 12.07(T) IOS.
> >
> > Any suggestions or has any one seen this before??
> >
> > Our other routers (all types of chassis including 2500's) seem to be
> > okay normally, but this is not definate.
> >
> > Rob O'Brien
> > CCNA
> > Canberra Australia
> >
> > _________________________________
> > FAQ, list archives, and subscription info:
> > http://www.groupstudy.com/list/cisco.html
> > Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> _________________________________
> FAQ, list archives, and subscription info:
> http://www.groupstudy.com/list/cisco.html
> Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
>
> PLEASE READ: The information contained in this e-mail is confidential
> and intended for the named recipient(s) only. If you are not an intended
> recipient of this email you must not copy, distribute or take any
> further action in reliance on it and you should delete it and notify the
> sender immediately. Email is not a secure method of communication and
> Nomura International plc cannot accept responsibility for the accuracy
> or completeness of this message or any attachment(s). Please check this
> e-mail for virus infection, for which Nomura International plc accepts
> no responsibility. If verification of this email is sought then please
> request a hard copy. Unless otherwise stated any views or opinions
> presented are solely those of the author and do not represent those of
> Nomura International plc. This email is intended for informational
> purposes only and is not a solicitation or offer to buy or sell
> securities or related financial instruments. Nomura International plc is
> regulated by the Securities and Futures Authority Limited and is a
> member of the London Stock Exchange.
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
