×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

show log

Unanswered Question
Oct 23rd, 2005
User Badges:

I make show logging. I see following message

Oct 24 11:18:57 MSK: %SEC-6-IPACCESSLOGP: list 105 denied udp 83.136.245.74(137) (FastEthernet0/0.200 000e.a6a2.572f) -> 192.168.1.50(137), 5 packets FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 002D 0104 7AFC 00B4 D5DD 3D82 1002 0601 0400 0100 0102 0280 0002 0202 00 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 002D 0104 7AFC 00B4 D5DD 3D82 1002 0601 0400 0100 0102 0280 0002 0202 00 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 002D 0104 7AFC 00B4 D5DD 3D82 1002 0601 0400 0100 0102 0280 0002 0202 00 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 002D 0104 7AFC 00B4 D5DD 3D82 1002 0601 0400 0100 0102 0280 0002 0202 00 FFFF FFFF FFFF FFFF FFFF FFFF FFFF FFFF 002D 0104 7AFC 00B4 D5DD 3D82 1002 0601 0400 0100 0102 0280 0002 0202 00


What is this?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Alex.Savin Mon, 10/24/2005 - 04:01
User Badges:

Yes, of course.

I use access-lists.

What means hexademical-codes after first prompt?

spremkumar Mon, 10/24/2005 - 04:12
User Badges:
  • Red, 2250 points or more

Hi


As mentioned by other poster its the log enabled in conjunction with the Access list configured.

PORT 137 related to UDP or TCP mainly used by Blaster worm to propagate.


It also uses ports 135 and tftp ports too in addition to the above mentioned port.


Though its blocking the same i would suggest to chek and harden your local workstations with required patches also with latest antivirus updates in them.


regds


Actions

This Discussion