Examples disclosed herein relate to a method comprising determining, at a first gateway, that a packet originating from a first device has hit an access control list (ACL) rule, wherein the first gateway has an Application Specific Integrated Circuit (ASIC) that does not have the capability to log packets that hit ACL rules. The method may include creating, at the first gateway, a copy of the packet and including, at the first gateway, an identification of the ACL Rule and an identification of the first device into a header of the copy of the packet. The method may include transmitting, from the first gateway, the copy of the packet to a first network device via a network tunnel.