A network sniffer (e.g., NetMon, Ethereal, WinDump) might allow you to see how far the process gets.... If you ran it on both client and server sides you might be able to prove/disprove the switch or server theory.