After searching and trying a number of packet sniffers to determine the source of heavy traffic usage, I found this the easiest to install and use by a long way. Its reporting is excellent and it makes it easy to see the source ip generating a lot of traffic.
http://www.colasoft.com/capsa/capsa-free-edition.php