logging inside ip to outside ip with time stamps

[david.wolover]

I'm running a Cisco PIX and need to determine if an INSIDE IP is connecting to and OUTSIDE IP and when it occurs. I thought I could make an access-list entry with a permit and then log it. Anyone done this before?

[sachinraja]

yeah.. access-list with the log option is the best for such scenarios. you will clearly get the source/destination IPs for the ACLs specified on the PIX.

Raj

[david.wolover]

Thanks for the response. I set it up to log at level 1 so as to avoid a bunch of other stuff from cluttering up the output. If I go for the packet specific info, I'll use the "capture" command or put a sniffer on the segment. Thanks again for the help.

[sachinraja]

Yeah .. that sounds fine. please mark the post as solved, which could be helpful to others.... rate replies if found useful.

All the best...

Raj