Heya Dean -
I use FileMon from sysinternals to see in real time whats a going on.
perhaps that would help you in your analysis for the client site ?
http://www.sysinternals.com/ntw2k/source/filemon.shtml

hth - mondo regards / slan [Bill]