When you enter the show ip access-list command, the match count displayed does not account for the packets that are access controlled in the hardware. I think sh mod command will also work.
"Show mod", didnt show anything about msfc restarting. But i tried "show log" =OK.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: