but sometimes traffic suddenly increased to 2 GB per one hour and then it decreased to low values again.
A peer may be connecting to you and downloading the blockchain from you. You can configure your client to not accept incoming connections (-nolisten) if operating a node with open access to other nodes to connect becomes a problem.