Re: [loganalysis] Cisco ICMP logs

From: Glenn Forbes Fleming Larratt (glrattat_private)
Date: Mon Aug 13 2001 - 15:05:46 PDT

Next message: Mike Hoskins: "Re: [loganalysis] Cisco ICMP logs"

Previous message: Brian Hatch: "[loganalysis] Full vs partial pattern matches"
In reply to: Jas Amidzic: "[loganalysis] Cisco ICMP logs"
Next in thread: Mike Hoskins: "Re: [loganalysis] Cisco ICMP logs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

See:

	http://www.iana.org/assignments/icmp-parameters

-g


On Mon, 13 Aug 2001, Jas Amidzic wrote:

> I am trying to make some sense of a Cisco Router logs. In particular ICMP logs,
> does anyone know how to differentiate between different ICMP packet logs
> recorded by the router. I am thinking that  (digit/digit) field has to do
> somthing with the ICMP message type but I am not sure.
>
> e.g.
>
> Dec  8 16:07:45 <ciscorouter> 3128095: Dec  8 16:07:44:
> %SEC-6-IPACCESSLOGDP:
>  list 104 denied icmp xxx.yyy.201.225 -> abc.def.64.77 (3/1), 1 packet
>
> Dec  8 16:07:45 <ciscorouter> 3128095: Dec  8 16:07:44:
> %SEC-6-IPACCESSLOGDP:
>  list 104 denied icmp xxx.yyy.201.225 -> abc.def.64.77 (11/0), 1 packet



				Glenn Forbes Fleming Larratt
				Rice University Network Management
				glrattat_private




---------------------------------------------------------------------
To unsubscribe, e-mail: loganalysis-unsubscribeat_private
For additional commands, e-mail: loganalysis-helpat_private

Next message: Mike Hoskins: "Re: [loganalysis] Cisco ICMP logs"
Previous message: Brian Hatch: "[loganalysis] Full vs partial pattern matches"
In reply to: Jas Amidzic: "[loganalysis] Cisco ICMP logs"
Next in thread: Mike Hoskins: "Re: [loganalysis] Cisco ICMP logs"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Mon Aug 13 2001 - 15:10:21 PDT