How to find the right port
As shown in the original article once I know the mac address of the offending machine I use the show mac-address-table but I add the end portion of the mac address and pipe through the include. So if I have a mac of afbe.17e2.bf12 I frame the command like so:
show mac-address-table | i bf12
This gives me only the port with the offender attached.