The customer wants to know why the SpanVA is sending UDP or ICMP packets to the Default Gateway.
SpanVA does a traceroute to the known GW of the network once every ten minutes, and this is done to distinguish a NAT GW from the bridged GW. NAT and bridged GW respond differently to traceroute requests.
This is done in use case where a customer runs SpanVA with one NAT and one bridged interface, we would be able to detect the bridged interface and show its IP and corresponding GW in the Network tab on SpanVA UI, and in the SpanVA details in the Cloudsoc Console