netstat will allow you to see all the connections with host names so you can easily seperate out traffic.
- Scott
p.s. One thing to note, if you are using Protection Manager as we are...it starts snapmirror updates via API calls, so there are other connections required from your Protection Manager server. We had so many snapvaults and snapmirrors to a nearstore personality that we overloaded the number of connections for API calls.