I'm not sure of how to capture that info. You certainly could tcpdump that traffic, being careful with the tool as the CPU is already forwarding traffic and so must be stressed. Maybe some debug commands exist, but I don't know them off the top of my head. Maybe people from our GTAC can help here.