thanks for the update. With some firewalls you can also determine which programs are connecting/sending/recieving data to a displayed IP address. Comodo for eg does that (but you have to search a bit)