Run snoopy(8) on the 9box, and tcpdump on the linuxcontainer, and check whether your hypothesis about the flashing lights is accurate.