I have been using various flavors of Tomato for a long time and have recently started using TomatoUSB. On the Real Time and Last 24 Hours graphs, I have noticed on two different routers that when nothing should be going on there is a slow and constant transfer at all times of the day. In the past I had always assumed something on my network and just couldn't figure it out, until recently when I setup a TomatoUSB VPN router for a family member's office. I remotely logged in and see the same pattern except this time I know it is Tomato doing it because nothing is turned on in the network. It is just the TomatoUSB VPN router and WiFi is turned off too. What is Tomato doing at all times of the day and how I can confirm what it is sending and to whom it is sending it?
I think I am going to buy another router capable of TomatoUSB VPN and put it on a separate LAN with Wireshark to see if I can capture what the heck it is doing. This is starting to alarm me. Hopefully someone already knows what is going on.