Hello to all. I have a strange occurrence that I've searched on the Internet and on the Peplink forums, but I haven't been able to find anything similar.
I have a Peplink Balance 50 with three WAN connections. I have a SIP PABX and SIP phones, all using fixed LAN IP addresses. The SIP phones only connect to the PABX within the LAN*, and all the SIP calls are routed through the PABX.
(* I'm not using any firewall to prevent the phones from connecting directly to the Internet, but they're only configured to connect to the PABX in the LAN, and there are no inbound rules that point to any of the phones).
Today I noticed a spike in traffic in the bandwidth history, from the IP address of one the SIP phones (10.0.0.247):
It's still going, the traffic counter on the bandwidth history for this IP is always increasing, even if the phone is not making or receiving any calls.
What is more strange is that if I search for this IP address on the router's Active Sessions page, with "Any" as the Protocol / Service, I never see any traffic found.
So I have two mysteries: why do I have this traffic, and why it doesn't show up on any established connections? Can anyone help me shed some light on this? Thanks!