What genarating net traffice

I already did a capture on the virtual terminal server and the only packages that I can see between the host that cause the high network usage and Terminal server is TCP and TPKT.
question is how can we find out what exacly cause the high usage.