WHO is sending large files

We are running Exchange 5.0, and have occasional periods where the clients experience very slow performance, using Outlook 97. I would like to know if there is a way to determine if a user is sending out large files to the internet. I suspect this may cause our slow performance.