1. A computer-implemented method comprising: receiving a request to monitor a first virtual machine running on a server, the server running within a service provider network; receiving first TCP connection state information from an instance manager hosting the first virtual machine, the first TCP connection state information relating to connections of the first virtual machine; analyzing the first TCP connection state information to identify one or more first indicators of network health condition in the service provider network, the analyzing including searching the first TCP connection state information for packet retransmissions, reductions in advertised window size, and out-of-order packets; and after identifying the one or more first indicators, causing information representing the identified one or more first indicators to be sent to a customer associated with the virtual machine.