analyze access-list syslog message

[jackson.ku]

Hi,

I received the following syslog message ( this message was sent from a Catalyst 6509 MSFC ) :

"172.16.3.253","28 Jan 2004 20:56:26 PST","SEC","6","IPACCESSLOGDP","list 192 denied icmp 192.168.3.252 (Vlan192 00d0.009b.ebfc) -> 140.112.125.37 (3/13), 1 packet","*"

The 3/13 in above message mean ICMP type 3 ( Destination Unreachable Message ) & code 13, but I can not find out what the code 13 mean.

Can you please tell me what the code 13 mean?

Best Regards,

[tbaranski]

See http://www.iana.org/assignments/icmp-parameters

It basically means there's an ACL in place that blocked the packet. Most devices that block packets don't bother returning an ICMP unreachable message, but some do.

[randyhorn]

Is the 3/13 the ethernet port maybe?