Hi
Just as an alternative. You could have a
"permit ip any any log" on your pix. This would log all access on that DMZ. As you determine the ports you can modify the access-list to add in the individual port entries. Keep the permit ip any any log at the end until you have accounted for all the ports ie. all your other rules are catching the traffic and not your catch all rule.
Obviously this would generate a fair bit of logging so you'll need disk space and be aware of the additional bandwwidth being used.
HTH
Jon
