RT_FLOW : APPTRACK_SESSION_VOL_UPDATE: AppTrack volume update: 192.168.1.10/60975->54.68.166.164/443 junos-https UNKNOWN UNKNOWN [REDACTED}/29978->54.68.166.164/443 nsw-src-interface None 6 All_Internal_Internet Internal Internet 25363 16705(1437242) 9442(1077571) 82276 N/A N/A No
So it seems to exclusively be junos-https traffic and "RT_FLOW : APPTRACK_SESSION_VOL_UPDATE"
Ill have a look at uploading the support information (want to go through it first and redact some bits).
I am also getting loads of these now;
Debugging (7) USPINFO
