NetWare 6.5 SP5 (OES SP2) server

TCP.NLM
Loaded from [SYS:SYSTEM] on Apr 17, 2007 11:47:20 am
(Address Space = OS)
Novell TCP/IP Stack - Transport module (NULL encryption)
Version 6.63.01 October 5, 2005
Copyright 1994-2005 Novell, Inc. All rights reserved. Patent pending.

CE1000.LAN
Loaded from [C:NWSERVERDRIVERS] on Apr 17, 2007 11:47:20 am
(Address Space = OS)
Intel(R) PRO/1000 Network Connections Driver
Version 7.84 March 9, 2005
Copyright 1998 - 2005 Intel Corporation. All Rights Reserved.

Remote Manager shows LAN Traffic counts routinely about 5000-6000 and our
network reports show constant 2Mbps traffic. Similar servers (exact
software/hardware, across some WAN link) show traffic routinely between
250-4000. The only other service running on the server in question is DNS.

Without sniffing packets, what types of traffic would cause continous
2Mbps network usage?