What's the relationship between inbound interface acl's and application inspection?Do the acl's get processed before the class-map statement creates the traffic class for the inspect command?

I'm trying to use the logging facility to refine an Access List in a test network. At the end of a list of ACE's I have a "permit ip any any log 5"I had the idea that only the flows that had fallen through all of my other rules would reach this last...