Not familiar with NFS, but shouldn't it have been possible to attribute the mystery traffic by port number by sniffing ?
Simply graphing netflow data would also have immediately pointed out an error.
alt Hacker News
Simply graphing netflow data would also have immediately pointed out an error.