hi, I have MT 2.9.41, my problem is that when I open winbox and go to tools ==> graphing, the public interface jumps immediately to high rates of both download and upload, those rate remain high even if I log off all the active users and it will not stop unless I would close the winbox. Has anyone faced such issue or know what is going on there?
Big Brother sees you!..
But… What torch says? 
well, better than torch, I used packet sniffer to track the traffic and analyzed it with wireshark, it was just high p/s rate data transfer between my pc and MT, nothing outside my system. My computer is talking to mikrotik using TCP port 1063 and Mt responding with TCP port 8291.