I'd use ethereal, but not on the actual server. I'd load it on a laptop, and then plug a hub between the Ethernet jack and the server, and add the laptop to that hub. Fire up ethereal, and let it start capturing packets. It will give you a nice picture of what protocols are being used first, and then can analyze based on source, destination, etc... Glenn Sullivan, MCSE+I MCDBA David Clark Company Inc. ________________________________ From: windows2000-bounce@xxxxxxxxxxxxx [mailto:windows2000-bounce@xxxxxxxxxxxxx] On Behalf Of Christine Allen Posted At: Wednesday, October 31, 2007 1:40 PM Posted To: Windows 2000 Conversation: Network/Internet Monitoring Subject: [windows2000] Network/Internet Monitoring Hello, I have a client who is running an SBS server that's public and private nics are pegged at 100% (using perfmom). Does anyone know of a free (or one that offers a demo) utility that I can use relatively fast to see what /or who is generating all this traffic? Thanks Regards, Christine Allen, MCSE Engineer II MicroData Group, Inc. 100 Cummings Center, Suite 146N Beverly, MA 01915 Voice 978.921.0990 x234 Fax 978.921.0950 http://www.microdata.com <http://www.microdata.com>