3550 switch show access-list does not show matches

[zhichao]

Hi

We have both standard and extended access-list configured. However show access-list does not show the matches for the extended access-list. Is this a bug or misconfig (I dont think we have misconfigured it)?

interface Vlan243

ip address 192.153.243.4 255.255.255.0

ip access-group 100 out

no ip unreachables

Standard IP access list 20

permit 172.25.168.8 (2 matches)

permit 172.25.196.22

permit 172.25.198.27

permit 172.25.196.27 (10 matches)

permit 172.25.197.27 (48 matches) check=4

permit 172.25.196.26 (4 matches)

Extended IP access list 100

permit tcp any any established

permit tcp host 10.160.11.11 eq ftp-data host 172.25.120.33 gt 1023

permit tcp host 10.160.161.6 eq ftp-data host 172.25.120.33 gt 1023

[glen.grant]

I would say it is a misconfig seeing that the standard access is seeing matches against it . Also there does not appear to be anything in access list 100 that pertains to the interface you applied it to address wise unless I am missing something .