I think this question can't answered without having any information from the used network infrastructure. I would expect that the most network environments have somne specific trafic e.g. for software update, remote control systems (switches), dhcp handling,
certificate and some others.
I would use the WPT and other tools to check / analyse what is the current trafic and which part of them can mimimize or switch off.