We've found that protocol statistics on our Gen 1 (cat 6509 sup1a) CatOS Layer-3 switches are extremely useful when tracking a virus/worm outbreak. Is there a command on an IOS Layer-3 switch similiar to:
sho mls statistics entry ip dst-port 5000
Thanks,
Sean