I have one client pulling a full content download instead of a delta, How do I tell which client it is?
this arttcle should help
http://www.symantec.com/connect/articles/how-can-we-check-which-content-sep-121-clients-are-downloading-gup
you can get to know if the client is downloading full.zip from the report that means it full download.
You can run wireshark on your SEPM and set a display to look for full.zip downloads. Use this filter:
(frame matches "(?i)full.zip" ) && (tcp.srcport == 8014)