Hacker News Reader

Not familiar with NFS, but shouldn't it have been possible to attribute the mystery traffic by port number by sniffing ?

Simply graphing netflow data would also have immediately pointed out an error.