
If you get a "No page found", you're in the clear. Once you have your IP addresses that you're suspicious of, or any IP addresses, just alter the IP at the end of that link above. I'd then go through the last minute or so of results and using a handy website called Netify, I was able to find things like this: Then I'd quickly swap to NetMon and stop the capture. So I'd limit the traffic to solitaire.exe, start a capture, then spam games until I got an ad.

It will capture all the network traffic on your computer but will allow you to specify a program/process to hone in on to reduce the huge amount of data to sift through.

So Microsoft has a network sniffer (that has since been deprecated but still works) called NetMon.
