If you have the disk space, you can use the new PCAP tool in Sysadmin. Run a pcap all day and then save it out and find those 0-8 calls.
Or you can setup something like this to run tcpdump continually.