Find out what queries are causing the biggest amount of network traffic
You can find this from the DMVs:

SELECT session_id, num_writes, st.text AS statement_text
FROM sys.dm_exec_connections AS ec
CROSS APPLY sys.dm_exec_sql_text(ec.most_recent_sql_handle) AS st
ORDER BY num_writes DESC


Unlike tracing this should be perfectly safe to run on a Production server.