I recently implemented Cisco NBAR at a remote sites, edge router. to filter and drop P2P traffic.
I see the dropped traffic by typing "show policy-map interface XXX"
how can i find the source of the torrent traffic ? specifically i'm looking for a way to log the source IP address.