[11811] in North American Network Operators' Group
Re: Loadsa ICMP...
daemon@ATHENA.MIT.EDU (Alex.Bligh)
Wed Aug 13 16:43:56 1997
To: Edward Henigin <ed@texas.net>
cc: lol@xara.net, nanog@merit.edu, noc@xara.net
In-reply-to: Your message of "Wed, 13 Aug 1997 14:00:00 CDT."
<19970813140000.25838@texas.net>
Date: Wed, 13 Aug 1997 20:08:12 +0100
From: "Alex.Bligh" <amb@xara.net>
> > Now if only Cisco's let you obtain a "src_hardware_addr" :(
>
> doesn't the 'log-input' keyword log the input interface? at
> the end of the access-list rule.
The I/P i/f is FDDI to MAE-East - we know this. The question is
which router on MAE-East it comes from. A trace to the source
doesn't help as we don't know the source address isn't faked.
It would be nice if using logging access lists you could show
the MAC address the packet came from.
Alex Bligh
Xara Networks
