We are seeing a similar process running parallel to my organization's application. The reason it's troubling is once our application starts there is about 1s of time in which our app appears to run normally. Then the unknown process has a very large request 20-100mb. Our application has a corresponding stop in network traffic that lasts as long as the process takes to send/receive the data, at that point my orgs process comes back and continues processing. Is there a way to determine what the process is? Is there any way for a dependency within my orgs app to show up as a separate process? Is it possible for instruments to pickup device traffic unrelated to itself?