You’ll probably have to capture all traffic using tcpdump for a few minutes (let’s say 10) and then load the file in Wireshark and get to analyzing what type of traffic you are looking at.
Something similar to what I had to do here to figure out our bandwidth usage.