I'm having a issue with a query that I can't figure out. For some reason the second part of my query is always the same as the first part of my query.
When I make two simple metrics to show the sum of in_bytes with the above queries I do get the correct numbers so it's not a data problem. When I switch src_addr and dst_addr the results are also reversed (two lines showing the exact same data based on dst_addr instead of src_addr).
Looks like somehow the results from the first part of the query are copied to the second.