Hi,
My company have a network infrastructure based on Multilayer switches.
We need to make some tracking on RDP (TCP 3389) trafic and logging to Syslog server.
- I have created a match access-list :
access-list 110 permit tcp any any eq 3389
- I have specified a Syslog server with the logging host commande line.
- When I tried to debug with :
debug ip packet 110 detail
I can't see any RDP trafic matched, even if many terminal server sessions (using RDP) are opened.
Any help please.
Mustapha.
