[tac_plus] Re: Can you log ping and traceroute commands?

[Andy Saykao]

Hi John,

I certainly hope my IOS version isn't broken.

Could somebody please verify if a 'ping' command shows up in the accounting
log (so I can go get a new IOS version if that's the case).

Many thanks.

Andy

On Fri, Nov 27, 2009 at 5:19 PM, john heasley <heas at shrubbery.net> wrote:

> Thu, Nov 26, 2009 at 11:45:07AM +1100, Andy Saykao:
> > Hi All,
> >
> > I've set up a hdtest user that can run privilege commands by using
> > privilege-level 3 and going into "enable 3". Whilst the user can run the
> > privilege commands like ping and traceroute, I am not seeing these
> commands
> > appear in the accounting logs for this user.
> >
> > It looks like the command 'ping' does not appear anywhere in the log even
> > when I use a privilege-level 15 user, so I can only assume that this is
> the
> > desired behaviour. But with traceroute, I see it appearing in the logs
> for a
> > privilege-level 15 user but not for a privilege-level 3 user? Any ideas
> why
> > this is so or how to see it in the log for a privilege-level 3 user?
>
> that'd seem a clear indication that your ios is broken.
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://www.shrubbery.net/pipermail/tac_plus/attachments/20091127/c18d043f/attachment.html