The message is seen when some packet-matching logs were missed because the access list log messages were rate limited, or no access list log buffers were available.
The problem here is that your switch is receiving too much traffic at the same time and he is not able to log every packet. The reason why it doesn't log them is to protect itself from crashing, because it takes processor usage to handle the ACLs logs.
Now we have two solutions for this log message:
1) If you want to disable the messages you need to erase the log keyword from the ACL
statements. (the keyword log :Logs a packet when it matches the ACE)
2)Increasing the amount of packets log (but that will decrease the performance of your
switch)
The logging of acl hits has always been rate limited, but before this enhancement all the packets for which we couldn't issue the log message were just 'forgotten about'. Now with this enhancement we count for how many packets we didn't issue syslog message. This is not configurable behaviour.
