Need to understand the traffic generation from AD connector and Native Database connector


We are using version 8.1.3 and we are using AD connector and Native Database connector which has connectivity with One IM database via Application Server. This is our QA environment and there is no major activity going on between One IM database and these 2 endpoints. Still we see a lot of traffic (400 gb+) getting generated in 24 hours in our firewall. When we stopped job service installed on this server which can connect to these 2 endpoints, traffic got reduced and thats how we understood that it is because of some processes which we are not sure of getting generated and is generating a lot of traffic. Please suggest.