I recently replaced a switch in a remote segment that doesn't have a lot of use by 2 PC's with a new Cisco SG250-08HP. I'm monitoring data from the Sonicwall with this device getting over 30% of the traffic based on the Top Denied Connection based on Source. I drilled down a bit farther and it looks like port 5353 is almost a match for the two items. I updated the firmware before going into production and question what this switch may be doing before getting into it for a deeper dive.
Any thoughts?