Unknown Traffic from router

[aneip]

One of my client see the traffic from their router (outgoing) but no traffic that’s time from lan. This is consent to them. I’m new to mikrotik router but do mikrotik upload something to the internet? Debug report or something.

We have 2 internet line. The 2nd line configured as fail over so no traffic should be there.. Except for out snmp query for monitoring.

The graph capture same traffic for both internet line, that’s seems quite weird. It’s about 500Kbp/s and last about 2 hour. Start at 10pm, and another one at 1am.

Below is the graph.

[MadEngineer]

Mikrotik devices don’t phone home or the likes on their own.

Check ip → firewall → connections for active connections. also ensure the firewall has been properly configured.

[Caci99]

Also, run torch (/tool torch) on the interface where the traffic is happening, and see what traffic it is and on which port, from whom to where.
A wild guess, it can be either proxy or dns.