If you can do a tcpdump or similar on your network you should be able to figure it out. Note that there are often bursts of activity if you have a gmail/gtalk account enabled, you should be able to recognize the traffic as it goes to google servers. If you have email services enabled there will be additional traffic. Skype will also add to it.