Re: [c-nsp] ACL sometimes logging dest_IP sometimes nexthop - why?

On 19/06/2024 9:38, Gert Doering wrote:
> Hi,
> 
> On Wed, Jun 19, 2024 at 08:44:20AM +0300, Hank Nussbacher via cisco-nsp wrote:
>> RP/0/RSP0/CPU0:2024 Jun 19 05:12:47 : ipv4_acl_mgr[343]:
>> %ACL-IPV4_ACL-6-IPACCESSLOGP : access-list log-traffic (10) permit udp
>> 192.114.102.104(55638) -> 192.0.2.2(53), 1 packet
> 
> You might actually have a client sending packets to 192.0.2.2...
> 
> "Someone set up a resolv.conf using an address from a training video,
> which used the doc prefix 192.0.2.x for things"...
> 
> gert

That might very well be it.  I heard that many DVRs probe for 192.0.2.2 
which could be the issue.

Thanks,
Hank
_______________________________________________
cisco-nsp mailing list  [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/