Sysdig has a metric called sysdig_host_net_total_bytes, and according to a document https://docs.sysdig.com/en/docs/sysdig-monitor/metrics-dictionary/host/ it represents "Total network bytes, inbound and outbound." It reports a number at each data point, but does this number mean total network bytes between the current and previous data points? For example, if the number is "900M" and the interval between data points is 10s, does it mean the bandwidth was 900M bytes per 10s = 90M bytes per second?
Edited: the reported numbers do not monotonically increase; they go up and down. This is why I suspect they are deltas.