This counter reports the cumulative number of inbound bytes NBAR has attributed to a specific protocol, giving a volume-based view rather than the packet-count view. Byte counts matter more than packet counts for capacity decisions since a protocol with few but large packets can consume more bandwidth than one with many small packets. A steadily rising byte count for 'https' streaming traffic approaching the link's total capacity would tell an admin that encrypted video, not raw packet volume, is what is saturating this link.