Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Dots in front of access-list log lines

I have the following access applied inbound on our serial port:

access-list 170 deny tcp any any eq smtp log

access-list 170 permit ip any any

Some of the log lines that result from the access-list have a period at the front of the line. What does the period mean?

Example:

.Jun 21 14:12:43 EDT: %SEC-6-IPACCESSLOGP: list 170 denied tcp 64.80.81.xxx(1165) -> 202.84.15.133(25), 1 packet unknown

.Jun 21 14:13:28 EDT: %SEC-6-IPACCESSLOGP: list 170 denied tcp 64.80.81.xxx(1166) -> 194.133.125.xxx(25), 1 packet av2.ornis.com

.Jun 21 14:16:12 EDT: %SEC-6-IPACCESSLOGP: list 170 denied tcp 64.80.81.xxx(1158) -> 194.133.125.xxx(25), 3 packets av2.ornis.com

Jun 21 14:17:12 EDT: %SEC-6-IPACCESSLOGP: list 170 denied tcp 64.80.81.xxx(1164) -> 206.46.170.xxx(25), 3 packets smtp.gte.net

Jun 21 14:18:12 EDT: %SEC-6-IPACCESSLOGP: list 170 denied tcp 64.80.81.xxx(1165) -> 202.84.15.xxx(25), 3 packets unknown

1 REPLY
Silver

Re: Dots in front of access-list log lines

That's odd behavior. I've not seen that. If you look at the actual packet with a sniffer is it there? It might be a bug or something happening on the log server.

125
Views
0
Helpful
1
Replies
CreatePlease to create content