How to find source of tftp traffic on Cisco 350 Managed Switch

[lgregg970]

I installed a new Cisco 350 Managed 48-port switch.  I get a continuous error message like this every two hours:  %TFTP-A-TftpRxERROR: An error message was received: 4 <Access violation.> 

To my knowledge, I'm not running a tftp server in that building.  Attempts to change the info provided in the log are fruitless.

Is there anyway my switch can tell me the source (as in IP address or MAC address) of this traffic?

Or would something like WireShark work better?

I don't know how to set up queries in WireShark so any suggestions would be great.

[marioiram]

Could you please attach the show log to see if there's more information there?

[lgregg970]

[lgregg970]

Now you see why I'm trying to figure out how to get more info from my Cisco switch.  This alert shows up every two hours pretty consistently.