You could install "ntop" via macports to see where and from where stuff is going/coming. Wireshark is another...

https://ports.macports.org/port/ntop/