Specific debug output.

[ddnicholls]

Our network is getting hit on a specific port. Is there any way (a debug?) I can get an output of addresses hitting that port, and also can I write the output to a file or TFTP server?

Thanks

[thisisshanky]

enable on the interfaces, where this traffic can possibly pass through, Netflow caching...

command is ip route-cache flow.

Once you do this, give the command,

show ip cache flow

This will list all traffic including source / destination ips and src / dst port numbers.

Note that port numbers are in hex.

Good luck!

[ddnicholls]

can I actually log that to a file though?

Thanks

[thisisshanky]

You can definitely copy the output and paste it. I guess, thats the only thing you can do.