[chillyjim]

Try running the monitor filtering for just that day (I think you can do this, but you might need reporter, I don't have a client handy to check). The traffic is being generated by a protocol you don't normally see on your network is all I can tell.