My understanding is if the packet is rejected or allowed before the port information is needed for comparison Cisco IOS will log it as port 0.
Darrell
------------------------------------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers.
Rick Davidson writes:
Does anyone know what traffic uses a destination and source port of 0? Or what else I should look for? This is a Novell/windows network
I have something odd going on at a large branch office so I added an acl to log the inbound and outbound traffic
permit ip any any log
permitted tcp 10.10.0.72(0) -> 10.10.9.18(0), 1 packet
permitted udp 10.10.0.98(0) -> 10.10.9.10(0), 1 packet
I have ALOT of lines with many source and destination addresses, the IPs are valid for the network
Thanks for any help
Rick Davidson
National Systems Manager
North American Title Group
-
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
