[tac_plus] Re: Can you log ping and traceroute commands?

[john heasley]

Thu, Nov 26, 2009 at 11:45:07AM +1100, Andy Saykao:
> Hi All,
> 
> I've set up a hdtest user that can run privilege commands by using
> privilege-level 3 and going into "enable 3". Whilst the user can run the
> privilege commands like ping and traceroute, I am not seeing these commands
> appear in the accounting logs for this user.
> 
> It looks like the command 'ping' does not appear anywhere in the log even
> when I use a privilege-level 15 user, so I can only assume that this is the
> desired behaviour. But with traceroute, I see it appearing in the logs for a
> privilege-level 15 user but not for a privilege-level 3 user? Any ideas why
> this is so or how to see it in the log for a privilege-level 3 user?

that'd seem a clear indication that your ios is broken.