ACL Logging Missing Packets

d1701 · ‎06-25-2008

Hello,

I'm receiving this error while logging my ACL's. %SEC-6-IPACCESSLOGRL: access-list logging rate-limited or missed XX packets.

I know that this means the logging is not reporting some packets, but how would you resolve this issue? I'm logging to syslog, would using a buffer on the routers or switch with this issue resolve it?

Thanks

Edison Ortiz · ‎06-25-2008

Your logging buffer isn't big enough to hold the amount of data that is being sent.

You can increase the logging buffer, please see

http://www.cisco.com/en/US/docs/ios/netmgmt/command/reference/nm_07.html#wp1011529

for command reference.

If you want to slow down the logging of the message so the buffer won't get full, you need to change the 'ip access-list log-update', see:

http://www.cisco.com/en/US/docs/ios/security/command/reference/sec_i1.html#wp1013491

for command reference.

HTH,

__

Edison.

Please rate helpful posts