router 1603R hardware rev 4 IOS 12.2.26 GD. i have created the below access list 101 permit tcp host 10.222.1.1 host 10.2.2.2 eq 25 deny ip any any then entered debug ip packet 101 detailed loggin mon deb term mon if i telnet 10.2.2.2 on port 25 from 10.222.1.1 it hits the permit rule and shows detailed debug output. if i ping 10.2.2.2 from 10.222.1.1 i still get debug output but limited saying tableid=0 src and dst etc etc am i doing the debug wrong as i cant do this debug on a live environment even with the ACL as it will kill the router. i thought only permited traffic was debugged, any advise apresciated cheers kev