It was mainly due to the poorly coded snapshat program: https://news.ntppool.org/2016/12/load/
EDIT: this post was indeed from 2014. My bad then. however the same issue started again two weeks ago (~17 dec 2016).
EDIT: this post was indeed from 2014. My bad then. however the same issue started again two weeks ago (~17 dec 2016).
https://cloud.githubusercontent.com/assets/1020675/21468123/...
Note that inbound traffic which was steady at ~4k packets/sec spikes as high as five times as much. Also note that the snapchat traffic followed a circadian rhythm (much higher traffic during the daytime).