I know everyone is saying to use TCPview or Wireshark, etc., but what I want to ask is how to do it over router connection, because all the remote addresses for the programs are going to
When the remote address is 127.0.0.1 (the localhost/loopback address), it is actually an incoming connection to your system. What you need to look at is the local address for those connections to see where they are coming from.
I had the same question a few years ago, Googling this answered it for me. It was something with adding a loopback adapter to the network connections or something... Think it shouldn't be that hard to find. I probably googled for something like "capture traffic from loopback adapter" or "capturing wireshark 127.0.0.1" or something.
I'll edit if I find something. If not, hope this helped you to find a solution!
Edit: First hit on Google gave me this: http://wiki.wireshark.org/CaptureSetup/Loopback