This is a running counter of the total bytes that have passed through this security association since it was established. Admins use it to confirm a tunnel is actually carrying traffic, since a value stuck at zero on a supposedly up SA points to a routing or policy problem upstream of the VPN, and to gauge overall tunnel utilization. A value climbing steadily during business hours confirms real application traffic is flowing over that particular tunnel.