This Counter64 field reports the bytes transmitted per second on the forward direction of this bidirectional CES tunnel, as computed for this PM instance. Because this row is a completed prior day's 24-hour bin kept in the daily-history table, letting you compare one calendar day against another after the fact, and this specific field is an instantaneous computed rate of transmitted egress traffic rather than a running total, so a spike here shows up the moment it happens rather than only after the interval ends, it is the field to check when you need to see the forward-direction egress throughput of the tunnel right now rather than a cumulative volume. For example, this counter might read 5,899 bytes/sec during yesterday's completed 24-hour bin — a sudden jump to several times that on the forward side, with no matching rise on the other direction, would point to a one-way traffic surge or an attack riding that leg of the tunnel.