We have a Small Business Server 2008 box that is using up way too much internet traffic according to some very simple reports on our SonicWall TZ-210 router. The router shows that we have used 3 gigabytes of SMTP traffic in a 24 hour period but I believe this number far exceeds our actual usage.
We are using Exchange Server 2007 on this server as well as hMailServer for some simple email relay.
I think I need a way to see the IP's, port numbers, and protocols related to our server traffic. What is a simple way to do this?
What various logging could I setup or what default logs might already exist to help me troubleshoot this problem?