Internet abuse

How have blocked out most chat programs at work but how do we find out what ports are used for streaming audio and napster a few users are smart enough not to use port6699
How do we seal this leak, without cutting total access to the web?