memFS on 23.7.9-amd64 and high traffic loads

[captainbablam]

Morning,
     Just upgraded from 22.x and within a day had logging overrun the 40G filesystem. As a result I moved /var/log to memory. The box is hosting a small site, 100mb wan 1G internal fabric. I have logging cranked down to nothing and that seems to have resolved the /var space issues. A new issue though, I'm seeing about 250mb/sec inbound on the Opensense inside interface from it's esxi 7 host. I'm concerned as this is a lot of traffic and the state/flows aren't telling me much. Has anyone seen this type of behavior and where is the best place to gather some forensics on what thehell is going on. TIA.

    -W