monitor traffice for spam virus

[phil]

Hi All

I need a command to use in the core router to check if any workstation is sending traffic on port 25 to the mail server

I saw one a few years ago to find a specific port for another virus

something like - show ip flow | include port 25 ingress

but obviously I cant remember it

please help

Thanks

[mpellegrino12 · Accepted solution]

Assuming you have netflow enabled on that port

sh ip flow top-talkers | i 0019

Mike

[phil]

Thanks Heaps Mike