iftop indicates that the heavy bandwidth consumption happens on port 11210 - if that helps narrow down the issue.