DNS sinks can often cause elevated traffic numbers because the client is constantly failing and retrying.

I bet if you enabled it to test the numbers would drop dramatically.