diff --git a/src/main/java/net/floodlightcontroller/devicemanager/internal/DeviceManagerImpl.java b/src/main/java/net/floodlightcontroller/devicemanager/internal/DeviceManagerImpl.java
index 8bdbf463a765aca6dde64ccb8881162dae82c10b..c85881d7578d2b64721dacd777c904c5044dbcce 100755
--- a/src/main/java/net/floodlightcontroller/devicemanager/internal/DeviceManagerImpl.java
+++ b/src/main/java/net/floodlightcontroller/devicemanager/internal/DeviceManagerImpl.java
@@ -1058,6 +1058,8 @@ IFlowReconcileListener, IInfoProvider, IHAListener {
                 // generate a new device ID. However, we first check if 
                 // the entity is allowed (e.g., for spoofing protection)
                 if (!isEntityAllowed(entity, entityClass)) {
+                    logger.info("PacketIn is not allowed {} {}", 
+                                entityClass.getName(), entity);
                     return null;
                 }
                 synchronized (deviceKeyLock) {
@@ -1091,6 +1093,8 @@ IFlowReconcileListener, IInfoProvider, IHAListener {
             }
 
             if (!isEntityAllowed(entity, device.getEntityClass())) {
+                logger.info("PacketIn is not allowed {} {}", 
+                            device.getEntityClass().getName(), entity);
                 return null;
             }
             int entityindex = -1;